Vulnerability

CERT-In Vulnerability Note CIVN-2025-0293
Multiple vulnerabilities in Google Android

Original Issue Date:November 06, 2025

Severity Rating: HIGH

Software Affected

Google Android versions 13, 14, 15, 16.

Overview

Multiple vulnerabilities have been reported in Google Android, which could be exploited by an attacker to gain elevated privileges or execute arbitrary code on the targeted system.

Target Audience:
All OEMs and users of Google Android

Risk Assessment:
High risk of unauthorized access of data and system instability.

Impact Assessment:
Potential for data breaches, or system crash.

Description

Android is an open-source operating system primarily designed for mobile devices, including smart phones, tablets, smart watches, and other embedded system.

Multiple vulnerabilities exist in Google Android due to flaws in the Android bug ID, Qualcomm reference number, MediaTek reference number, NVIDIA reference number, Broadcom reference number, UNISOC reference number.

Successful exploitation of these vulnerabilities could allow an attacker to gain elevated privileges or execute arbitrary code on the targeted system.

Solution

Apply appropriate updates when made available by respective OEMs.
https://source.android.com/docs/security/bulletin/2025-11-01

Vendor Information

Google Android
https://source.android.com/docs/security/bulletin/2025-11-01

References

Google Android
https://source.android.com/docs/security/bulletin/2025-11-01

CVE Name
CVE-2025-48593
CVE-2025-48581

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-22902657

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India