Google fixes actively exploited Android vulnerabilities (CVE-2025-48543, CVE-2025-38352)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-38352 | Actively Exploited TOCTOU Race Condition in Linux Kernel POSIX CPU Timers | 7.8 | 1% | KEVPoC ×2 | KEV |
| CVE-2025-48539 | In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free | 8.0 | <1% | ||
| CVE-2025-48543 | Use-After-Free in Android Runtime Enables Sandbox Escape and Local Privilege Escalation | 8.8 | <1% | KEV | KEV |
From the original article
1 min read at helpnetsecurity.com
Google has provided fixes for over 100 Android vulnerabilities, including CVE-2025-48543 and CVE-2025-38352, which “may be under limited, targeted exploitation.” Among the fixed flaws is also CVE-2025-48539, a critical vulnerability in the System component that “could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed and no user interaction required.”
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.