Google Android Family September 2025 Routine Security Update Advisory

Overview

Google (https://www.google.com) has released a security update that fixes vulnerabilities in the Android family of products. Users of affected products are advised to update to the latest version.

Affected Products

Android Qualcomm Components
Android Frameworks
Android MediaTek components
Android Qualcomm closed-source components
Android system

Resolved Vulnerabilities

Highly-rated local privilege escalation vulnerabilities in the Android framework (CVE-2025-0089, CVE-2025-0089, CVE-2025-32324, CVE-2025-32325, CVE-2025-32331, CVE-2025-32349, Cve-2025-32350, cve-2025-48522, cve-2025-48528, cve-2025-48540, cve-2025-48546, cve-2025-48548, cve-2025-48549, cve-2025-48552, cve-2025-48553, cve-2025-48553, cve-2025-48556, cve-2025-48558, cve-2025-48563) [2]
High information disclosure vulnerabilities in the Android framework (CVE-2025-0076, CVE-2025-32330, CVE-2025-48529, CVE-2025-48537, CVE-2025-48545, CVE-2025-48561, CVE-2025-48562) [2]
Highly-rated denial-of-service vulnerabilities in the Android framework (CVE-2025-48538, CVE-2025-48542, CVE-2025-48550, CVE-2025-48554, CVE-2025-48559) [2]
Highly critical remote code execution vulnerability in Android systems (CVE-2025-48539, CVE-2025-48539) [2]
Highly-rated local privilege escalation vulnerabilities in Android systems (CVE-2021-39810, CVE-2023-24023, CVE-2024-49714, CVE-2025-26454, CVE-2025-26464, CVE-2025-32321, CVE-2025-32323, CVE-2025-32323, CVE-2025-32326, Cve-2025-32327, cve-2025-32333, cve-2025-32345, cve-2025-32346, cve-2025-32347, cve-2025-48523, cve-2025-48526, cve-2025-48531, cve-2025-48532, cve-2025-48535, cve-2025-48541, cve-2025-48544, cve-2025-48547) [2]
Highly-rated information disclosure vulnerabilities in the Android system (CVE-2025-48527, CVE-2025-48551, CVE-2025-48560) [2]
Highly-rated Denial of Service Vulnerabilities in Android systems (CVE-2025-48524, CVE-2025-48534) [2]
Highly-rated vulnerabilities in Android MediaTek (DA, Modem) components (CVE-2025-20696, CVE-2025-20704, CVE-2025-20708, CVE-2025-20703) [2]
Highly rated vulnerabilities in Android Qualcomm (Video, Security, Kernel, WLAN) components (CVE-2025-27042, CVE-2025-27043, CVE-2025-27056, CVE-2025-27057, CVE-2025-27061) [2]
Highly rated vulnerabilities in Android Qualcomm closed-source (Closed-source component) components (CVE-2025-21450, CVE-2025-21483, CVE-2025-27034, CVE-2025-21427, CVE-2025-21432, CVE-2025-21433, CVE-2025-21446, CVE-2025-21449, CVE-2025-21454, CVE-2025-21464, Cve-2025-21465, cve-2025-21477, cve-2025-21481, cve-2025-21482, cve-2025-21484, cve-2025-21484, cve-2025-21487, cve-2025-21488, cve-2025-27032, Cve-2025-27052, cve-2025-27065, cve-2025-27066, cve-2025-27073, cve-2025-47317, cve-2025-47318, cve-2025-47326, cve-2025-47328, cve-2025-47329) [2]

Vulnerability Patches

Product-specific Vulnerability Patches were made available in the September 5, 2025 update. For more information on Vulnerability Patches, please see the Referenced Sites documentation. [3]

Referenced Sites

[1] Android Security Bulletins
https://source.android.com/docs/security/bulletin/asb-overview

[2] Android Security Bulletin-September 2025
https://source.android.com/docs/security/bulletin/2025-09-01.html

[3] Check & update your Android version
https://support.google.com/android/answer/7680439