Android Framework Integer Overflow Vulnerability

Summary

Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation.

Remediation

1. Inventory every Android Framework deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.
3. Review logs from before the change for signs of exploitation.

References

• Advisoryhttps://source.android.com/docs/security/bulletin/2026/2026-06-01
• Advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2025-48595
• Referencehttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48595