September 2025 Android Security Bulletin Highlights Exploited Flaws: CVE-2025-38352 & CVE-2025-48543

According to Google’s bulletin, the September 2025 Android Security Bulletin notes two flaws already under exploitation: CVE‑2025‑38352, a kernel race condition, and CVE‑2025‑48543, a privilege escalation in the Android Runtime. Google confirms that CVE‑2025‑38352 has been exploited in limited, targeted attacks, while CVE‑2025‑48543 has seen exploitation attempts in the wild.

The bulletin also patches other critical vulnerabilities, including CVE‑2025‑48539, a remote code execution issue in the System component, and CVEs in Qualcomm closed‑source components such as CVE‑2025‑21450, CVE‑2025‑21483, and CVE‑2025‑27034. Devices at the 2025‑09‑05 patch level are protected against all vulnerabilities listed, with earlier 2025‑09‑01 patch level covering runtime, framework and system flaws, and later patches expanding to kernel and vendor‑specific issues.

Google said that patches will appear in the Android Open Source Project repository within 48 hours to aid rapid updates. The article also highlights safeguards like Google Play Protect and platform hardening as part of staying protected ahead of patches.