Local Privilege Escalation Vulnerability in Android Framework by Google

CVE-2025-48540

What is CVE-2025-48540?

In the processTransactInternal method of RpcState.cpp within the Android Framework, a logic error leads to a potential out-of-memory write. This flaw can enable local escalation of privilege without requiring additional execution rights or user interaction, making it a serious concern for system security.

References