Cyber Security News

Android Security Updates: Patch for Critical RCE Vulnerabilities

The January 2025 Android Security Bulletin has issued important updates regarding critical vulnerabilities that affect Android devices.

Users are urged to ensure their devices are updated to the latest security patch level, which as per the bulletin, should be 2025-01-05 or later to mitigate potential risks.

Overview of Vulnerabilities

The bulletin highlights a series of Remote Code Execution (RCE) vulnerabilities within the Android System component.

These vulnerabilities are deemed critical due to the potential impact they can have on affected devices, especially if the platform’s inherent security mitigations are bypassed.

The Android security team emphasizes that these vulnerabilities could allow attackers to execute harmful code without needing additional privileges.

In response to these vulnerabilities, Android partners were informed at least a month before the bulletin’s publication.

Source code patches for these vulnerabilities are set to be released in the Android Open Source Project (AOSP) repository within 48 hours. Updated links to the AOSP will be provided once they are available.

Severity Assessment

The vulnerabilities listed below are critical and categorized according to their CVE IDs. They are grouped under the component they affect, providing insights into their severity and the specific AOSP versions they impact.

CVE IDTypeSeverityUpdated AOSP Versions
CVE-2024-43096RCECritical12, 12L, 13, 14, 15
CVE-2024-43770RCECritical12, 12L, 13, 14, 15
CVE-2024-43771RCECritical12, 12L, 13, 14, 15
CVE-2024-49747RCECritical12, 12L, 13, 14, 15
CVE-2024-49748RCECritical12, 12L, 13, 14, 15

The Android security platform and Google Play Protect provide vital protections that reduce the likelihood of successful exploitation of these vulnerabilities.

Users are advised to remain vigilant and ensure their devices are updated regularly to the latest Android version.

Google Play Protect, which comes enabled by default on devices with Google Mobile Services, plays a crucial role in safeguarding users against potentially harmful applications and threats.

Staying updated with the latest security patches is crucial for all Android users. Regular updates not only protect devices from known vulnerabilities but also enhance overall security, ensuring a safer mobile experience.

ANY.RUN Threat Intelligence Lookup - Extract Millions of IOC's for Interactive Malware Analysis: Try for Free

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Operation Endgame Crushes DanaBot Malware, Shuts Down 150 C2 Servers and Halts 1,000 Daily Attacks

Operation Endgame II has delivered a devastating strike against DanaBot, a notorious malware that has…

26 minutes ago

Apple XNU Kernel Flaw Enables Attackers to Escalate Privileges

Apple has released urgent security patches addressing CVE-2025-31219, a high-severity vulnerability in its XNU kernel…

43 minutes ago

Inside LockBit: Data Leak Reveals Leading Affiliates and How They Operate

A massive data leak from the LockBit ransomware group, published on its hijacked leak site,…

44 minutes ago

ViciousTrap Hackers Breaches 5,500+ Edge Devices from 50+ Brands, Turns Them into Honeypots

A sophisticated cyber threat actor, dubbed ViciousTrap by Sekoia.io's Threat Detection & Research (TDR) team,…

51 minutes ago

Russian Hacker Indicted Over $24 Million Qakbot Ransomware Operation

The U.S. Department of Justice has unsealed a federal indictment against Rustam Rafailevich Gallyamov, 48,…

2 hours ago

Fortinet Zero-Day Under Attack: PoC Now Publicly Available

FortiGuard Labs released an urgent advisory detailing a critical vulnerability, CVE-2025-32756, affecting several Fortinet products,…

2 hours ago