![\"CVE-2025-48543](\"https:\/\/img2.helpnetsecurity.com\/posts2025\/android-650-1.webp\" "\\"Android\\"\/")
<\/p>\nGoogle has provided fixes for over 100 Android vulnerabilities, including CVE-2025-48543 and CVE-2025-38352, which \u201cmay be under limited, targeted exploitation.\u201d<\/p>\n
<\/p>\n
Among the fixed flaws is also CVE-2025-48539, a critical vulnerability in the System component that \u201ccould lead to remote (proximal\/adjacent) code execution with no additional execution privileges needed and no user interaction required.\u201d <\/p>\n
The exploited vulnerabilities<\/p>\n
CVE-2025-48543 affects the Android Runtime \u2013 the application runtime environment used by Google\u2019s mobile operating system. CVE-2025-38352 is a race condition in Android\u2019s Linux kernel.<\/p>\n
Both vulnerabilities could lead to local escalation of privilege with no additional execution privileges needed, and require no user interaction to be exploited.<\/p>\n
Google did not share details about the attacks in which these vulnerabilities have been leveraged, but the wording they used \u2013 \u201climited, targeted exploitation\u201d \u2013 makes it likely that they are being exploited to deliver mercenary spyware to very specific high-risk users.<\/p>\n
Nevertheless, all Android would do well to implement the fixes as soon as possible. <\/p>\n
Security updates from Google, Samsung and Motorola<\/p>\n
Google has provided security updates<\/a> for its Android-powered Pixel phones, which address Pixel-specific issues and all issues in the September 2025 Android Security Bulletin.<\/p>\n Samsung has released<\/a> a maintenance release for major flagship models fixing both flaws (and many others fixed by Google this September). <\/p>\n Motorola\u2019s September 2025 security patch updates include<\/a> a fix for CVE-2025-48543, but not for CVE-2025-38352.<\/p>\n![](\"https:\/\/img2.helpnetsecurity.com\/posts2024\/devider.webp\"\/)
<\/p>\n