← Back

CVE-2025-48595

nvd nist
Published: Jun 1, 2026Modified: Jul 22, 2026CISA KEV

JSON object

Loading...
8.4
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.5 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected (6)

Products: Google: Android
Google
1 product
Android
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Google
Android
Version 14.0
Android
Version 15.0
Android
Version 16.0
Android
Version 16.0 qpr2_beta_1
Android
Version 16.0 qpr2_beta_2
Android
Version 16.0 qpr2_beta_3

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

Source: security@android.com
Vendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.