CVE-2025-48543
Android Runtime Use-After-Free Vulnerability
Published Sep 4, 2025 · updated Jun 17, 2026 · google android
In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Timeline
Detection, updates, and resolution for this record.
Sep 4, 2025 · Catalog
Detected
In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Sep 4, 2025 · CISA KEV
Known exploited
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Sep 25, 2025 · CISA KEV
Remediation due
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Jun 17, 2026 · Catalog
Updated
In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA due date Sep 25, 2025
Affected
- cpe google/android13.0
- cpe google/android14.0
- cpe google/android15.0
- cpe google/android16.0
- vendor Android Runtimeversion unspecified
Sources
- CISA KEVCVE-2025-48543
Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.
cisa.gov - CVE.orgCVE-2025-48543
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-48543
30-day exploitation probability 0.6%
first.org - NIST NVDCVE-2025-48543
In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
nvd.nist.gov