CVE-2025-48543highunder attackCWE-416

CVE-2025-48543: high-severity vulnerability in Google Android

Published · Updated

71Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 8.8epss 0.6%
from disclosure to weapon10 days
Published on NVDSep 4
1st PoC+10d
CISA KEVSep 4
exploitation probability
0.6%top 50% of all CVEs
observed exploitation
yesCISA + VulnCheck
1 public exploit(s)
Action required by CISAfederal deadline: 2025-09-25

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

A flaw in Chrome allows an attacker to escape the browser's sandbox and gain unauthorized access to Android's system processes. This means someone can run malicious code with high system privileges without needing the user to do anything special.

Technical detail

Use-after-free vulnerability in Chrome's sandbox implementation enables local privilege escalation targeting Android system_server. The attack requires no additional execution privileges or user interaction, allowing an unprivileged process to break sandbox confinement and execute code with elevated system capabilities.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Google · Android
public PoCs found — 1
vulncheckvulncheck.com/xdb/abd8fafc41d1unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Google Android

In the same product, most dangerous first.

CVE-2024-32896HIGHCVE-2024-32896EPSS 3.0%KEVCVE-2023-35674HIGHCVE-2023-35674EPSS 2.6%KEVCVE-2025-48595HIGHCVE-2025-48595EPSS 1.7%KEVCVE-2024-43093HIGHCVE-2024-43093EPSS 0.7%KEVCVE-2024-29748HIGHCVE-2024-29748EPSS 0.7%KEVCVE-2026-58704HIGHCVE-2026-58704EPSS 0.6%KEV
References
https://android.googlesource.com/platform/art/+/444fc40dfb04d2ec5f74c443ed3a4dd45d3131f2https://source.android.com/security/bulletin/2025-09-01https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48543