Skip to content
OpenAdvisories
High · 7.8 CVE-2025-48596 EUVD-2025-201762GHSA-mw86-5pq8-22c8

In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of p…

Published Dec 8, 2025 · Updated Feb 26, 2026 · Assigned by google_android

Vendor: Google Product: Android Platform: Android

Description

In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected products

VendorProductAffectedFixed
Google Android 16, 15, 14, 13 —

Advisories 3

References