Google has released a critical Android Security Bulletin for September 2025, addressing multiple high-severity vulnerabilities that are currently being actively exploited in the wild.
The security patch level 2025-09-05 or later is required to protect Android devices from these serious threats.
The security bulletin reveals that two CVEs are under limited, targeted exploitation, making this update particularly urgent for Android users worldwide.
The most severe vulnerability affects the System component and could enable remote code execution without requiring any additional privileges or user interaction.
Critical Vulnerabilities Under Active Exploitation
According to Google’s security assessment, the vulnerability’s severity rating assumes that platform and service mitigations are disabled for development purposes or have been successfully bypassed by attackers. This indicates the potential for serious compromise if exploited successfully.
The security update addresses vulnerabilities across multiple Android components, with particular focus on the Android Runtime and System components.
| CVE | Reference | Type | Severity |
| CVE-2025-38352 | A-425282960 | EoP (Elevation of Privilege) | High |
| CVE-2025-48543 | A-421834866 | EoP (Elevation of Privilege) | High |
Both actively exploited vulnerabilities are classified as Elevation of Privilege (EoP) flaws with High severity ratings.
CVE-2025-38352 affects the Android Runtime component and has been linked to upstream kernel issues.
Meanwhile, CVE-2025-48543 impacts Android versions 13, 14, 15, and 16, demonstrating the widespread nature of these security concerns across the Android ecosystem.
Android partners were notified of these vulnerabilities at least one month before public disclosure, following Google’s responsible disclosure practices.
Source code patches will be released to the Android Open Source Project (AOSP) repository within 48 hours of the bulletin publication.
Users should immediately check their device’s security patch level and install available updates.
The security team strongly encourages all users to update to the latest version of Android where possible, as newer versions include enhanced security protections that make exploitation significantly more difficult.
This security bulletin represents a critical moment for Android security, particularly given the active exploitation of these vulnerabilities.
The rapid response from Google and the Android security team demonstrates the ongoing commitment to protecting the billions of Android devices worldwide from sophisticated cyber threats.
The coordinated disclosure and patching process, combined with enhanced monitoring through Google Play Protect, showcases the multi-layered approach necessary to maintain security in today’s complex mobile threat landscape.
Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant Updates.
