Out of Bounds Read Vulnerability in Android Native Framework

CVE-2025-48596

What is CVE-2025-48596?

A vulnerability exists in the appendFrom method of Parcel.cpp, which may permit an out of bounds read due to a missing bounds check. This flaw could enable an attacker to escalate privileges locally, without requiring additional execution permissions or user interaction for execution. It is essential for users and administrators to apply available patches to mitigate the risk of potential exploitation.

References