Android Issues Security Update to Patch Actively Exploited 0-Day Flaws
Google has issued the Android Security Bulletin for September 2025, addressing multiple high-severity vulnerabilities that are actively exploited.
Google has issued the Android Security Bulletin for September 2025, addressing multiple high-severity vulnerabilities that are actively exploited.
The security patch level 2025-09-05 or later is essential to protect Android devices from these threats.
This update is urgent due to two CVEs being under limited, targeted exploitation.
The most severe vulnerability affects the System component and could enable remote code execution without the need for additional privileges or user interaction.
Critical Vulnerabilities Under Active Exploitation
The vulnerabilities' severity rating assumes platform and service mitigations are disabled for development or bypassed by attackers, highlighting the potential for serious compromise.
The security update addresses vulnerabilities across multiple Android components, focusing on the Android Runtime and System components.
CVE Reference Type Severity
CVE-2025-38352 A-425282960 EoP (Elevation of Privilege) High
Google has issued the Android Security Bulletin for September 2025, addressing multiple high-severity vulnerabilities that are actively exploited.
CVE-2025-48543 A-421834866 EoP (Elevation of Privilege) High
Both vulnerabilities are classified as Elevation of Privilege (EoP) with High severity ratings.
CVE-2025-38352 affects the Android Runtime component, linked to upstream kernel issues.
CVE-2025-48543 impacts Android versions 13, 14, 15, and 16, indicating widespread security concerns across the Android ecosystem.
Android partners were informed of these vulnerabilities at least one month prior to public disclosure, adhering to Google's responsible disclosure practices.
Source code patches will be released to the Android Open Source Project (AOSP) repository within 48 hours of the bulletin publication.
Users are advised to check their device's security patch level and install available updates immediately.
The security team strongly encourages updating to the latest version of Android, as newer versions include enhanced security protections that make exploitation more difficult.
This security bulletin underscores a critical moment for Android security due to the active exploitation of these vulnerabilities.
Google and the Android security team's rapid response demonstrates their commitment to protecting Android devices worldwide from sophisticated cyber threats.
The coordinated disclosure and patching process, along with enhanced monitoring through Google Play Protect, showcase the multi-layered approach necessary to maintain security in today's complex mobile threat landscape.
Based on reporting by GBHackers.