CVE-2025-48595

Android Framework Integer Overflow Vulnerability

Android — Framework

Added to KEV catalog: 2 June 2026
Federal remediation due date: 5 June 2026
Weakness classification (CWE): CWE-190

CISA Description

Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://source.android.com/docs/security/bulletin/2026/2026-06-01 ; https://nvd.nist.gov/vuln/detail/CVE-2025-48595

View on NVD View on MITRE CVE View full CISA catalog

More Android Vulnerabilities

CVE-2025-48572

Android Framework Privilege Escalation Vulnerability

CVE-2025-48633

Android Framework Information Disclosure Vulnerability

CVE-2025-48543

Android Runtime Use-After-Free Vulnerability

CVE-2024-43093

Android Framework Privilege Escalation Vulnerability

CVE-2024-36971

Android Kernel Remote Code Execution Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services