CVE catalog
CVE-2025-48595
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. Us
- Severity
- High · CVSS 8.4
- Published
- Source
- [NVD] · [CVE record]
- Exploitation
- CISA Known Exploited Vulnerabilities
- EPSS
- 1.95% · Oct 25, 2026
Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Cpe | android | Not reported | Not reported | unknown |
| Android | platform/external/sqlite | Not reported | 14 | vulnerable |
| Android | platform/external/sqlite | Not reported | 14:2026-06-01 | fixed |
| Android | platform/build/release | Not reported | 16-qpr2 | vulnerable |
| Android | platform/build/release | Not reported | 16-qpr2:2026-06-01 | fixed |
| Android | platform/vendor/google_shared/build/release | Not reported | 15 | vulnerable |
| Android | platform/vendor/google_shared/build/release | Not reported | 15:2026-06-01 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Android | platform/external/sqlite | Android | Not reported | 14:2026-06-01 | Not reported | ASB-A-430889718 | Not reported |
| Android | platform/build/release | Android | Not reported | 16-qpr2:2026-06-01 | Not reported | ASB-A-430889718 | Not reported |
| Android | platform/vendor/google_shared/build/release | Android | Not reported | 15:2026-06-01 | Not reported | ASB-A-430889718 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://nvd.nist.gov/vuln/detail/CVE-2025-48595]
- [https://osv.dev/vulnerability/ASB-A-430889718]
- [https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2472.json]
- [https://www.cisa.gov/known-exploited-vulnerabilities-catalog]
[CERT-Bund public advisories] · [CISA Known Exploited Vulnerabilities (OSINT)] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database]