Potential Escalation of Privilege Vulnerability in Android System Server
CVE-2025-48543

8.8HIGH

Key Information:

Vendor

Google
Status
Android
Vendor
CVE Published:
4 September 2025

Badges

đź“° News Worthy

What is CVE-2025-48543?

This vulnerability arises from a possible escape from the Chrome sandbox, which affects the Android system_server due to a use after free condition. It could enable local escalation of privilege without requiring additional execution privileges, and it exploits flaws that can occur in multiple locations within the system. Importantly, user interaction is not necessary for an attacker to exploit this vulnerability, posing significant security risks to affected Android devices.

Affected Version(s)

Android 16

Android 15

Android 14

News Articles

favicon imageMalwarebytes

Update your Android! Google patches 111 vulnerabilities, 2 are critical

Google has issued updates to patch a whopping 111 Android vulnerabilities, including two actively exploited ones.

2 days ago

References

https://android.googlesource.com/platform/art/+/444fc40df...
https://source.android.com/security/bulletin/2025-09-01

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • đź“°

    First article discovered by Malwarebytes

  • Vulnerability Reserved

.
CVE-2025-48543 : Potential Escalation of Privilege Vulnerability in Android System Server