CVE-2025-48593
Use after free in Google Android
CVSS score
8.0
EPSS probability
%0.9
Risk score
0.1
Published
11 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
"A single malicious packet can own your device." — Android Security Team, Nov 2025 (★1)
Makefile Go / Python
GitHub
CVE-2025-48593 Zero-Click Remote Code Execution in Android System (★0)
Makefile Go / Python
Similar Vulnerabilities
9.6
CVE-2023-4863 Actively exploitedlibwebp: Heap buffer overflow in WebP Codec
Partial patch Public Exploits:8EPSS %100
8.8
CVE-2018-17463 Actively exploitedchromium-browser: Remote code execution in V8
VendorRed HatProduct6Client-Supplementary-6.10.z:chromium-browser-0:70.0.3538.67-1.el6_10.i686+10 etkilenen
RH
Patch verified Public Exploits:3EPSS %85
7.8
CVE-2018-15982 Actively exploitedUse after free in N/a
Patch verified Public Exploits:1EPSS %90
8.8
CVE-2020-6418 Actively exploitedchromium-browser: Type confusion in V8VendorRed HatProduct6Client-Supplementary-6.10.z:chromium-browser-0:80.0.3987.122-1.el6_10.i686+12 etkilenen
RH
Patch verified Public Exploits:5EPSS %79
8.8
CVE-2022-2294 Actively exploitedVulnerability in Google Chrome
Patch status unknown Public Exploits:10EPSS %71
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-48593"