CVE-2025-48595

Name of the Vulnerable Software and Affected Versions Android versions 14 through 16 QPR2

Description An integer overflow exists in multiple locations within the Android Framework, which is the core layer of APIs and system services that applications interact with. This issue allows for local escalation of privilege, enabling an attacker to execute arbitrary code with higher privileges. Exploitation does not require user interaction or additional execution privileges. There are indications that this issue has been under limited, targeted exploitation in the wild, and it has been added to the CISA Known Exploited Vulnerabilities (KEV) catalog.

Recommendations Update Android 14, 15, 16, and 16 QPR2 to the 2026-06-05 security patch level.