CVE-2025-48543
HIGH KEVAndroid - Use-After-Free in Chrome Sandbox Escape
Title source: llmExploitation Summary
CVE-2025-48543 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added September 4, 2025. EIP tracks 2 public exploits from researchers including gamesarchive, adminlove520.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2025-48543, targeting a use-after-free (UAF) vulnerability in the Android Binder component. The exploit leverages a dangling BinderProxy object to hijack control flow, execute a ROP chain, and achieve privilege escalation to SYSTEM on the host kernel.
Description
In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Exploits (2)
This repository contains a functional exploit for CVE-2025-48543, targeting a use-after-free (UAF) vulnerability in the Android Binder component. The exploit leverages a dangling BinderProxy object to hijack control flow, execute a ROP chain, and achieve privilege escalation to SYSTEM on the host kernel.
This repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H