8.0 High
CVE-2026-0059
Google Android vulnerability
GoogleAndroid
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 23 Oct
0.1%probability of exploitation in the next 30 days
Higher than 1% of scored CVEs
SeverityCVSS
8.0High
Description NVD
In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Coverage 1 article · 1 outlet
- Google patches Android zero day CVE‑2025‑48595 among 124 fixesSecurityWeek · first in our coverage · mentions it in passing