Google Addresses Critical Android Vulnerabilities in September 2025 Security Update

In September 2025, Google released a significant security update for its Android operating system, addressing a total of 120 vulnerabilities, including two high-severity zero-day flaws that are currently being exploited in targeted attacks. The vulnerabilities, tracked as CVE-2025-38352 and CVE-2025-48543, are classified as elevation of privilege (EoP) vulnerabilities affecting the Linux kernel and Android Runtime, respectively. These flaws allow attackers to gain elevated privileges without requiring user interaction, posing a serious risk to device security.

Android Update Fixes Two Zero-Day Flaws Under Active ExploitationCyberscoopAndroid Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under AttackSeptember 2025 Android Security Bulletin Highlights Exploited Flaws: CVE-2025-38352 & CVE-2025-48543Android Security Update Patches Actively Exploited 0-Day VulnerabilitiesLifehackerMirror - UK

CVE-2025-38352, with a CVSS score of 7.4, is a privilege escalation flaw in the Linux kernel that could lead to system destabilization or denial of service. CVE-2025-48543, while not assigned a CVSS score, similarly allows local privilege escalation within the Android Runtime, enabling malicious applications to bypass sandbox restrictions. Both vulnerabilities have been confirmed to be under limited, targeted exploitation, making immediate patching essential for users.

Android Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under AttackSeptember 2025 Android Security Bulletin Highlights Exploited Flaws: CVE-2025-38352 & CVE-2025-48543Android Update Fixes Two Zero-Day Flaws Under Active ExploitationAndroid Security Update Patches Actively Exploited 0-Day VulnerabilitiesCyberscoopLifehacker

Google's September update includes two patch levels: 2025-09-01 and 2025-09-05. The latter addresses all identified vulnerabilities and is recommended for installation. The update also includes critical fixes for remote code execution vulnerabilities, particularly CVE-2025-48539, which could allow arbitrary code execution without user interaction.

CyberscoopLifehackerSeptember 2025 Android Security Bulletin Highlights Exploited Flaws: CVE-2025-38352 & CVE-2025-48543Android Security Update Patches Actively Exploited 0-Day VulnerabilitiesAndroid Update Fixes Two Zero-Day Flaws Under Active ExploitationAndroid Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under Attack

Android device manufacturers, including Samsung, Motorola, and Nokia, are responsible for rolling out these updates to their devices. Samsung has already begun distributing its September 2025 Security Maintenance Release (SMR), which includes fixes for 86 vulnerabilities, 58 of which are high-severity Android OS vulnerabilities. Users are advised to check for updates regularly through their device settings to ensure they are protected against these vulnerabilities.

Samsung Rolls Out Major September 2025 Security PatchSamsung’s September 2025 Security Update is Massive, Fixes 86 IssuesMirror - UKSamsung’s September update adds nearly 100 fixes.Android Security Update Patches Actively Exploited 0-Day VulnerabilitiesLifehackerCyberscoop

While the update addresses critical security flaws, some experts have raised concerns about the speed at which patches are deployed across various devices. Adam Boynton, Senior Security Strategy Manager at Jamf, emphasized the importance of immediate updates, stating, “The latest Android bulletin contains fixes for two actively exploited vulnerabilities, making it crucial Android users immediately update their devices.” The delay in patch deployment for non-Google devices could leave users vulnerable for extended periods.

Samsung Rolls Out Major September 2025 Security PatchMirror - UKAndroid Security Update Patches Actively Exploited 0-Day VulnerabilitiesSamsung’s September 2025 Security Update is Massive, Fixes 86 IssuesCyberscoopLifehackerSamsung’s September update adds nearly 100 fixes.

Google has urged all Android partners to implement the latest security patches promptly. The company stated, “Android partners are encouraged to fix all issues in this bulletin and use the latest security patch level.” This coordinated disclosure process allows manufacturers to prepare updates in advance, ensuring that users receive timely protection against emerging threats.

Android Security Update Patches Actively Exploited 0-Day VulnerabilitiesSamsung’s September 2025 Security Update is Massive, Fixes 86 IssuesLifehackerSamsung Rolls Out Major September 2025 Security PatchMirror - UKCyberscoop

As the landscape of mobile security continues to evolve, Google plans to release source code patches for all vulnerabilities addressed in this month's security update to the Android Open Source Project repository. This will facilitate quicker updates from device manufacturers and custom ROM developers, enhancing overall security for Android users.

Android Security Update Patches Actively Exploited 0-Day Vulnerabilities

• “The latest Android bulletin contains fixes for two actively exploited vulnerabilities, making it crucial Android users immediately update their devices,” — Adam Boynton, Senior Security Strategy Manager EMEIA at Jamf

Mirror - UK

• “Android partners are encouraged to fix all issues in this bulletin and use the latest security patch level,” — Google Official Statement

Android Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under Attack

In summary, the September 2025 Android Security Update is a critical measure to protect users from serious vulnerabilities that are actively being exploited. Users are strongly encouraged to install the latest patches to safeguard their devices.

Android Security Update Patches Actively Exploited 0-Day VulnerabilitiesSamsung Rolls Out Major September 2025 Security PatchCyberscoopMirror - UKAndroid Update Fixes Two Zero-Day Flaws Under Active ExploitationLifehacker