VULNERABILITY INTELLIGENCE
CVE-2025-48530
CVSS score8.1 HIGH
EPSS probability0.52%
CISA KEVNot currently listed
Published2025-09-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check. This could lead to remote code execution in combination with other bugs, with no additional execution privileges needed. User interaction is not needed for exploitation.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-125
Primary references
- security@android.com — Vendor Advisory