CVE-2025-48595
In multiple locations, there is a possible way to achieve code execution due to an integer...
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
CVE-2025-48595- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2025-210013
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
EUVD-2025-210013- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-2mvq-m5m5-v7m7
In multiple locations, there is a possible way to achieve code execution due to an integer...
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
GHSA-2mvq-m5m5-v7m7- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
CISA KEV No score
Android Framework Integer Overflow Vulnerability
Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.
- Record
CVE-2025-48595- Weakness
- CWE-190
- Updated
- 2026-11-02
NVD
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
CVE-2025-48595- CVSS 3.1
- 8.4 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-05
OSVASB-A-430889718 No score
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- Record
ASB-A-430889718- Updated
- 2026-11-05
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
platform/external/sqliteAndroid |
17-next:0 up to 17-next:2026-06-01, plus listed versions 17-next |
17-next:2026-06-01 |
platform/build/releaseAndroid |
15:0 up to 15:2026-06-01, plus listed versions 15 |
15:2026-06-01 |
platform/external/sqliteAndroid |
15:0 up to 15:2026-06-01, plus listed versions 15 |
15:2026-06-01 |
platform/vendor/google_shared/build/releaseAndroid |
15:0 up to 15:2026-06-01, plus listed versions 15 |
15:2026-06-01 |
platform/build/releaseAndroid |
16:0 up to 16:2026-06-01, plus listed versions 16 |
16:2026-06-01 |
platform/external/sqliteAndroid |
16:0 up to 16:2026-06-01, plus listed versions 16 |
16:2026-06-01 |
platform/build/releaseAndroid |
16-qpr2:0 up to 16-qpr2:2026-06-01, plus listed versions 16-qpr2 |
16-qpr2:2026-06-01 |
platform/external/sqliteAndroid |
16-qpr2:0 up to 16-qpr2:2026-06-01, plus listed versions 16-qpr2 |
16-qpr2:2026-06-01 |
platform/external/sqliteAndroid |
14:0 up to 14:2026-06-01, plus listed versions 14 |
14:2026-06-01 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | HORKimhab/CVE-2025-48595 | 2026-06-03 |
| PoC in GitHub | fevar54/CVE-2025-48595-Android-Framework-Integer-Overflow- | 2026-06-09 |
| PoC in GitHub | XiaoBaiLovesStirring/CVE-2025-48595-Exploit | 2026-08-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation, exploits | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-48595 is a high vulnerability (CVSS 8.4) in Android Framework, published June 1, 2026. CISA lists it as known to be exploited, since June 2, 2026. EUVD reports exploitation since June 2, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.95%, the 80th percentile. Fixed in platform/external/sqlite 17-next:2026-06-01.
References
source.android.com/docs/security/bulletin/2026/2026-06-01
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48595
nvd.nist.gov/vuln/detail/CVE-2025-48595
github.com/advisories/GHSA-2mvq-m5m5-v7m7
android.googlesource.com/platform/build/release/+/b11607ea3ec7ab3183b558392850c842c582d2cc
Show 4 moreShow less