Google fixed two actively exploited Android zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-43047 | Use-After-Free in Qualcomm FastConnect and QCA Chipset Firmware | 7.8 | <1% | KEV | KEV |
| CVE-2024-43093 | Local Privilege Escalation via Unicode Path Filter Bypass in Android Framework | 7.3 | <1% | KEV | KEV |
| CVE-2024-50302 | Kernel Memory Leak via Uninitialized HID Report Buffer in Linux Kernel | 5.5 | <1% | KEV | KEV |
| CVE-2024-53104 | Out-of-Bounds Write in Linux Kernel UVC Video Driver (CVE-2024-53104) | 7.8 | 3% | KEV | KEV |
| CVE-2024-53150 | Out-of-Bounds Read in Linux Kernel ALSA USB Audio Driver | 7.1 | 1% | KEV | KEV |
| CVE-2024-53197 | Out-of-Bounds Write in Linux Kernel ALSA USB Audio Driver (CVE-2024-53197) | 7.8 | 4% | KEV | KEV |
From the original article
1 min read at securityaffairs.com
Google addressed 62 vulnerabilities with the release of Android ‘s April 2025 security update, including two actively exploited zero-days. Google released Android ‘s April 2025 security updates to address 62 vulnerabilities, including two zero-day vulnerabilities ( CVE-2024-53197 , CVE-2024-53150 ) exploited in targeted attacks. The vulnerability CVE-2024-53197 is a Linux kernel issue affecting ALSA USB audio.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.