EXPOSURES › CVE-2025-48595
CVE-2025-48595
HIGH ⌖ ON CISA KEV · EXPLOITEDAndroid Framework integer overflow vulnerability enables local privilege escalation and code execution.
This integer overflow flaw in the Android Framework allows attackers to execute arbitrary code and escalate privileges locally, posing a severe risk to DIB organizations relying on Android-based endpoints. The vulnerability is actively exploited in the wild, necessitating immediate patching to prevent unauthorized access and data exfiltration.
Shame score — Active exploitation in the wild with local privilege escalation potential creates significant security exposure for DIB vendors using Android frameworks.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.