CVE-2025-48539

Published Sep 4, 2025

Last updated 2 months ago

Android

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-48539 is a critical vulnerability found in the System component of Android. It could lead to remote code execution (RCE) by a proximal or adjacent attacker. Exploitation does not require user interaction or additional execution privileges. The vulnerability is considered a severe risk because it could allow an attacker within a short distance to compromise a device, possibly through methods like Bluetooth, NFC, or Wi-Fi Direct. Google has released a security patch to address this vulnerability in the September 2025 Android Security Bulletin.

Description: In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Source: security@android.com
NVD status: Analyzed
Products: android

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8
Impact score: 5.9
Exploitability score: 2.1
Vector string: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-416

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:google:android:15.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8538774C-906D-4B03-A3E7-FA7A55E0DA9E"
          },
          {
            "criteria": "cpe:2.3:o:google:android:16.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2D49E611-5D53-479D-A981-42388FDC0E8D"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.