What it is
Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Android entries on the list
- Framework Android Framework Information Disclosure Vulnerability CVE-2025-48633 · Dec 2, 2025
- Framework Android Framework Privilege Escalation Vulnerability CVE-2025-48572 · Dec 2, 2025
- Runtime Android Runtime Use-After-Free Vulnerability CVE-2025-48543 · Sep 4, 2025
- Framework Android Framework Privilege Escalation Vulnerability CVE-2024-43093 · Nov 7, 2024
- Kernel Android Kernel Remote Code Execution Vulnerability CVE-2024-36971 · Aug 7, 2024
- Pixel Android Pixel Privilege Escalation Vulnerability CVE-2024-32896 · Jun 13, 2024