Google has launched its April 2025 Android Safety Bulletin, which incorporates patches for 62 vulnerabilities affecting Android units. Two of the fixes handle important zero-day flaws that will have been exploited in “restricted, focused” assaults, based on Google. Zero-days are safety vulnerabilities which are exploited earlier than the software program developer can establish the flaw and concern a patch.
The safety replace for April contains fixes for a variety of points, lots of which elevation of privilege flaws, in addition to vulnerabilities with Qualcomm, MediaTek, Arm, and Creativeness Applied sciences parts.
Two severe exploits
One of many zero-day exploits (labeled CVE-2024-53197) is an elevation of privilege flaw within the Linux kernel’s USB-audio driver for ALSA Units. In response to Bleeping Pc, this vulnerability was recognized by Amnesty Worldwide’s Safety Lab in 2024 as a part of a series—together with one flaw mounted in February and one other in March—utilized by Serbian police to focus on activists.
The opposite zero-day (labeled CVE-2024-53150) is an data disclosure vulnerability within the Android kernel that allows native attackers to realize entry to knowledge with out the system person’s enter.
If you happen to’re an Android person, you have to be certain your system is updated with this newest patch.
What do you assume to date?
The best way to replace your Android
Google points patches for each its Pixel telephones and the core Android Open Supply Undertaking (AOSP) code and provides producers of different units—like Samsung, Motorola, and Nokia—advance discover to allow them to push updates across the identical time. You probably have an Android, you must get a notification to put in an replace when one is accessible.
You can even go to About cellphone or About pill > Android model to make sure your system is updated and examine your replace standing (below System > Software program replace or System replace). If a patch is required, observe the prompts to obtain and set up updates.
Any system operating Android 10 or later might obtain each safety updates and Google Play system updates. This spherical of patches applies to AOSP variations 13, 14, and 15 and is cut up into two components, the latest of which is dated 2025-04-05.