Heap Buffer Overflow Vulnerability in Android Framework by Google

CVE-2025-32325

What is CVE-2025-32325?

A heap buffer overflow vulnerability has been identified in the Android Framework's appendFrom function located in Parcel.cpp. This flaw allows an attacker to potentially escalate privileges on the local system without requiring additional execution privileges. Notably, this vulnerability does not necessitate user interaction for exploitation, making it a critical concern for systems running affected versions of the Android Framework. It is imperative for users and administrators to ensure their systems are updated to the latest versions to mitigate this risk.

References