Google fixed a critical remote code execution in Android

Google’s November 2025 Android security updates address two vulnerabilities in the System component, including a critical remote code execution issue, fixed at the 2025-11-01 patch level. According to bulletin, the most severe flaw could lead to remote code execution with no additional execution privileges needed and without user interaction for exploitation.

The two vulnerabilities are CVE-2025-48593, for insufficient validation of user input that could lead to remote code execution affecting Android 13, 14, 15 and 16, and CVE-2025-48581, in VerifyNoOverlapInSessions of apexd.cpp, which could allow local escalation of privilege through mainline installations on Android 16. The company is not aware of attacks in the wild exploiting these vulnerabilities.

The article notes that the fixes accompany the November 2025 Android security updates, and highlights that no exploitation in the wild has been observed to date.