Skip to content
COOEY

EXPOSURES › CVE-2025-48595

CVE-2025-48595

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2026-06-02 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-48595 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 65/100 rceexploited-in-wildprivilege-escalation

Android Framework integer overflow vulnerability enables local privilege escalation and code execution.

This integer overflow flaw in the Android Framework allows attackers to execute arbitrary code and escalate privileges locally, posing a severe risk to DIB organizations relying on Android-based endpoints. The vulnerability is actively exploited in the wild, necessitating immediate patching to prevent unauthorized access and data exfiltration.

Shame score — Active exploitation in the wild with local privilege escalation potential creates significant security exposure for DIB vendors using Android frameworks.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.