Logic Error in BaseBundle.java Leading to Arbitrary Code Execution in Android Framework

CVE-2025-48583

What is CVE-2025-48583?

A logic error in multiple functions of BaseBundle.java in the Android Framework allows for possible arbitrary code execution. This vulnerability does not require any additional execution privileges or user interaction to be exploited, resulting in local privilege escalation risks. The vulnerability highlights the importance of validating code paths to prevent unauthorized access and execution.

References