CVE-2025-48539

—

CVSS 3.1

8.0 high

EPSS

<1%p16

Published

Sep 4, 2025 (Sep 4, 2025)

Modified

Jun 17, 2026

Description

In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Vendors: google
Products: android
Weakness: CWE-416
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news3 stories

Google fixes actively exploited Android vulnerabilities (CVE-2025-48543, CVE-2025-38352)

Help Net SecuritySep 4, 00:00 UTC · Sep 4, 2025Vulnerability in the wildCVE-2025-48543 CVE-2025-38352 CVE-2025-48539

Google addressed two Android flaws actively exploited in targeted attacks

Security AffairsSep 3, 17:38 UTC · Sep 3, 2025Vulnerability in the wildCVE-2025-38352 CVE-2025-48543 CVE-2025-48539

Google patches two Android zero-days, 120 defects total in September security update

CyberScoopSep 3, 15:45 UTC · Sep 3, 2025Vulnerability in the wildCVE-2025-38352 CVE-2025-48543 CVE-2025-48539+3 CVEs