coldbraid

CVE-2025-48595 Google Android

In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVSS
8.4 High
EPSS
1.9%
Percentile
81
Published
2026-06-01
Force
9 of 12
Public PoC
3

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-190

On CISA’s exploited list

Android Framework Integer Overflow Vulnerability

Added
2026-06-02
Federal patch deadline
2026-06-05
Ransomware use
not known