What it is
Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Android entries on the list
- Framework Android Framework Integer Overflow Vulnerability CVE-2025-48595 · Jun 2, 2026
- Framework Android Framework Information Disclosure Vulnerability CVE-2025-48633 · Dec 2, 2025
- Framework Android Framework Privilege Escalation Vulnerability CVE-2025-48572 · Dec 2, 2025
- Runtime Android Runtime Use-After-Free Vulnerability CVE-2025-48543 · Sep 4, 2025
- Framework Android Framework Privilege Escalation Vulnerability CVE-2024-43093 · Nov 7, 2024
- Kernel Android Kernel Remote Code Execution Vulnerability CVE-2024-36971 · Aug 7, 2024