Android Hit by 0-Click RCE Vulnerability in Core System Component

Android has been hit by a 0-click remote code execution vulnerability in a core system component, with an urgent security alert issued regarding the flaw tracked as CVE-2025-48593. The vulnerability affects Android versions 13 through 16 and requires no user interaction to exploit, making it exceptionally dangerous. According to gbhackers, an attacker can remotely execute code on a victim’s device simply by targeting them with specialised exploit code.

The issue exists in a core Android System component and operates silently, without any user action being needed. The alert has prompted calls for immediate action from device manufacturers and users alike. The disclosure was published on 7 November 2025 by DataBreaches[.]Net.