Android Security Alert: Google Patches 120 Flaws, Including Two Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-21479+1 related CVE | Incorrect Authorization in Qualcomm GPU Firmware Across Multiple Chipsets | 8.6 group max | <1% | KEVPoC ×2 | KEV |
| CVE-2025-38352 | Actively Exploited TOCTOU Race Condition in Linux Kernel POSIX CPU Timers | 7.8 | 1% | KEVPoC ×2 | KEV |
| CVE-2025-48543 | Use-After-Free in Android Runtime Enables Sandbox Escape and Local Privilege Escalation | 8.8 | <1% | KEV | KEV |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan Sep 03, 2025 Mobile Security / Vulnerability Google has shipped security updates to address 120 security flaws in its Android operating system as part of its monthly fixes for September 2025, including two issues that it said have been exploited in targeted attacks. CVE-2025-38352 (CVSS score: 7. 4) - A privilege escalation flaw in the Linux Kernel component
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.