What it is
Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Android entries on the list
- Framework Android Framework Integer Overflow Vulnerability CVE-2025-48595 · Jun 2, 2026
- Framework Android Framework Information Disclosure Vulnerability CVE-2025-48633 · Dec 2, 2025
- Framework Android Framework Privilege Escalation Vulnerability CVE-2025-48572 · Dec 2, 2025
- Framework Android Framework Privilege Escalation Vulnerability CVE-2024-43093 · Nov 7, 2024
- Kernel Android Kernel Remote Code Execution Vulnerability CVE-2024-36971 · Aug 7, 2024
- Pixel Android Pixel Privilege Escalation Vulnerability CVE-2024-32896 · Jun 13, 2024