Google patches two Android zero-days, 120 defects total in September security update
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-21450 | Cryptographic issue occurs due to use of insecure connection method while downloading | 9.1 | <1% | ||
| CVE-2025-21483 | Memory corruption when the UE receives an RTP packet from the network, during the reassembly of NALUs | 9.8 | <1% | ||
| CVE-2025-27034 | Memory corruption while selecting the PLMN from SOR failed list | 9.8 | <1% | ||
| CVE-2025-38352 | Actively Exploited TOCTOU Race Condition in Linux Kernel POSIX CPU Timers | 7.8 | 1% | KEVPoC ×2 | KEV |
| CVE-2025-48539 | In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free | 8.0 | <1% | ||
| CVE-2025-48543 | Use-After-Free in Android Runtime Enables Sandbox Escape and Local Privilege Escalation | 8.8 | <1% | KEV | KEV |
From the original article
2 min read at cyberscoop.com
The critical, actively exploited zero-day vulnerabilities affect the Linux kernel and Android runtime. Workers enter a building on the Google headquarters campus on July 23, 2025, in Mountain View, California.
By @CyberScoopNews · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.