Google has released a critical Android Security Bulletin for September 2025, addressing multiple high-severity vulnerabilities that are currently being actively exploited in the wild.
The security patch level 2025-09-05 or later is required to protect Android devices from these serious threats.
The security bulletin reveals that two CVEs are under limited, targeted exploitation, making this update particularly urgent for Android users worldwide.
The most severe vulnerability affects the System component and could enable remote code execution without requiring any additional privileges or user interaction.
According to Google’s security assessment, the vulnerability’s severity rating assumes that platform and service mitigations are disabled for development purposes or have been successfully bypassed by attackers. This indicates the potential for serious compromise if exploited successfully.
The security update addresses vulnerabilities across multiple Android components, with particular focus on the Android Runtime and System components.
| CVE | Reference | Type | Severity |
| CVE-2025-38352 | A-425282960 | EoP (Elevation of Privilege) | High |
| CVE-2025-48543 | A-421834866 | EoP (Elevation of Privilege) | High |
Both actively exploited vulnerabilities are classified as Elevation of Privilege (EoP) flaws with High severity ratings.
CVE-2025-38352 affects the Android Runtime component and has been linked to upstream kernel issues.
Meanwhile, CVE-2025-48543 impacts Android versions 13, 14, 15, and 16, demonstrating the widespread nature of these security concerns across the Android ecosystem.
Android partners were notified of these vulnerabilities at least one month before public disclosure, following Google’s responsible disclosure practices.
Source code patches will be released to the Android Open Source Project (AOSP) repository within 48 hours of the bulletin publication.
Users should immediately check their device’s security patch level and install available updates.
The security team strongly encourages all users to update to the latest version of Android where possible, as newer versions include enhanced security protections that make exploitation significantly more difficult.
This security bulletin represents a critical moment for Android security, particularly given the active exploitation of these vulnerabilities.
The rapid response from Google and the Android security team demonstrates the ongoing commitment to protecting the billions of Android devices worldwide from sophisticated cyber threats.
The coordinated disclosure and patching process, combined with enhanced monitoring through Google Play Protect, showcases the multi-layered approach necessary to maintain security in today’s complex mobile threat landscape.
Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant Updates.
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…