Exploitation Summary
CVE-2025-48595 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 2, 2026. EIP tracks 2 public exploits from researchers including fevar54, HORKimhab.
AI-analyzed exploit summary The repository contains a functional proof-of-concept for CVE-2025-48595, an integer overflow vulnerability in the Android Framework. It includes native code (C) and a Java-based PoC demonstrating the overflow, along with a verification script to check device vulnerability.
Description
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Exploits (2)
The repository contains a functional proof-of-concept for CVE-2025-48595, an integer overflow vulnerability in the Android Framework. It includes native code (C) and a Java-based PoC demonstrating the overflow, along with a verification script to check device vulnerability.
The repository contains no functional exploit code, only a template structure with a README and LICENSE. It appears to be a placeholder for a future PoC.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H