8.0
High
CVE-2025-48539 In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free
Description
In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products and versions
Other CVEs of Android
The 1729 CVEs of Android →
CVE-2026-58977
In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check
6.7
Medium
CVE-2026-58930
An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when…
7.8
High
CVE-2026-58927
The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized…
6.7
Medium
CVE-2026-58926
A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t`…
2.5
Low