Android Issues Security Update to Patch Actively Exploited 0-Day Flaws

Google has released a critical Android Security Bulletin for September 2025, addressing multiple high-severity vulnerabilities that are currently being actively exploited in the wild. The security patch level 2025-09-05 or later is required to protect Android devices from these serious threats, with two CVEs under limited, targeted exploitation making the update urgent for users worldwide.

According to Google’s security assessment, the vulnerabilities are classified as Elevation of Privilege flaws with High severity, affecting the Android Runtime and System components. CVE-2025-38352 is linked to the Android Runtime and upstream kernel issues, while CVE-2025-48543 impacts Android versions 13, 14, 15, and 16.

Source code patches will be released to the Android Open Source Project repository within 48 hours of the bulletin publication, and users are urged to check their device’s security patch level and install updates where possible.