Exploited Vulnerabilities Daily
🌐 English

Home › Android

CVE-2025-48595: Android Framework

EPSS1.7%No. 1610 of 1739 in KEV
CVE year2025~1 yrs before listing
Same vendor in KEV17
Same product6
FieldValue
VendorAndroid
ProductFramework
NameAndroid Framework Integer Overflow Vulnerability
Added to KEV2026-06-02
US federal due date2026-06-05
Ransomware useUnknown
CWECWE-190

CISA description

Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.

Other entries for this product

CVEVendor / productAddedEPSSRansomware
CVE-2025-48633Android Framework2025-12-020.2%Unknown
CVE-2025-48572Android Framework2025-12-020.2%Unknown
CVE-2024-43093Android Framework2024-11-070.7%Unknown
CVE-2023-35674Android Framework2023-09-132.6%Unknown
CVE-2023-20963Android Framework2023-04-131.4%Unknown

NVD — CVE-2025-48595

Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page

A Android Framework vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2026-06-02.