Android Update Patches Critical Remote Code Execution Flaw

Google has rolled out a fresh Android security update in November 2025 addressing two vulnerabilities in the System component, with devices at patch level 2025-11-01 now protected. The most severe issue, tracked as CVE-2025-48593, could allow remote code execution without any additional privileges or user interaction, and affects Android versions 13, 14, 15 and 16.

The second flaw, CVE-2025-48581, also concerns the System component and affects devices running Android 16, with a NIST advisory noting a potential for local escalation of privilege due to a logic error in apexd.cpp that could block security updates through mainline installations. Google states there were no security issues addressed in Google Play system updates and no patches in the November 2025 Automotive OS and Wear OS bulletins.

The company confirms that the November fixes represent a shift to a single security patch level rather than the prior dual levels used for about a decade. SecurityWeek’s Ionut Arghire reports that the patches follow August and September updates which addressed more than 100 vulnerabilities, though Google does not indicate exploitation in the wild for these two flaws.