CVE-2025-48595

high

Description

In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Exploits
More

https://www.securityweek.com/organizations-warned-of-exploited-linux-kernel-vulnerability/

https://www.bleepingcomputer.com/news/security/cisa-warns-of-active-attacks-exploiting-android-linux-bugs/

https://securityaffairs.com/193067/security/u-s-cisa-adds-android-and-linux-kernel-flaws-to-its-known-exploited-vulnerabilities-catalog.html

https://securityaffairs.com/193057/breaking-news/google-patches-actively-exploited-android-flaw-affecting-millions-of-devices.html

https://www.securityweek.com/android-update-patches-exploited-zero-day-123-other-vulnerabilities/

https://www.helpnetsecurity.com/2026/06/02/android-vulnerability-exploited-cve-2025-48595/

https://www.cisa.gov/news-events/alerts/2026/06/02/cisa-adds-two-known-exploited-vulnerabilities-catalog

https://www.bleepingcomputer.com/news/security/google-fixes-one-actively-exploited-android-zero-day-124-flaws/

https://thehackernews.com/2026/06/google-june-2026-android-update-patches.html

https://github.com/FCortezSecurity/AVEN

https://github.com/cpt-ferna02/AVEN

https://github.com/HORKimhab/CVE-2025-48595

https://github.com/DeliciousToe/CVE-notification-n8n

https://github.com/cataam-security/cataam

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48595

https://source.android.com/docs/security/bulletin/2026/2026-06-01

Details

Source: Mitre, NVD

Published: 2026-06-01

Updated: 2026-07-22

Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.4

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H