In its April 2025 security update, Google patched 62 vulnerabilities in Android, including two zero-days used in targeted attacks. Among the 62 fixed vulnerabilities, most are high-severity elevation of privilege flaws, and two are zero-day vulnerabilities that hackers can easily exploit.
CVE-2024-43197 is a critical privilege escalation flaw in the Linux kernel’s USB-audio driver for ALSA devices. Authorities in Serbia allegedly used this zero-day exploit, developed by the Israeli digital forensics firm Cellebrite, to unlock seized Android devices.
By infosecbulletin
/ Saturday , April 26 2025
NVIDIA has released a software security update for its GPU Display Driver to fix multiple vulnerabilities affecting both the driver...
Read More
By infosecbulletin
/ Saturday , April 26 2025
The SessionShark phishing kit bypasses Office 365 MFA by stealing session tokens. Experts warn about real-time attacks using fake login...
Read More
By infosecbulletin
/ Friday , April 25 2025
In Q1 2025, VulnCheck identified evidence of 159 CVEs publicly disclosed for the first time as exploited in the wild....
Read More
By infosecbulletin
/ Friday , April 25 2025
The NVIDIA NeMo Framework has three vulnerabilities that could enable attackers to execute remote code, risking AI system compromise and...
Read More
By infosecbulletin
/ Thursday , April 24 2025
Cisco issued a security advisory about a remote code execution (RCE) vulnerability (CVE-2025-32433) affecting multiple products in its portfolio due...
Read More
By infosecbulletin
/ Thursday , April 24 2025
SonicWall has revealed a vulnerability in its SonicOS SSLVPN Virtual Office interface that could let remote attackers crash firewall appliances....
Read More
By infosecbulletin
/ Thursday , April 24 2025
GitLab has announced a security advisory urging users to upgrade their self-managed installations right away. Versions 17.11.1, 17.10.5, and 17.9.7...
Read More
By infosecbulletin
/ Wednesday , April 23 2025
Imdadul Haque, the president of Internet Service Provider of Bangladesh (ISPAB) said, I automatically got back my WhatsApp account. What...
Read More
By infosecbulletin
/ Wednesday , April 23 2025
Zyxel Networks has issued critical security patches for two high-severity vulnerabilities in its USG FLEX H series firewalls. These flaws...
Read More
By infosecbulletin
/ Wednesday , April 23 2025
South Korea's largest mobile operator, SK Telecom, is warning that a malware infection allowed threat actors to access sensitive USIM-related...
Read More
The second zero-day vulnerability (CVE-2024-53150) in the Android Kernel is caused by an out-of-bound read issue. If exploited, it enables local attackers to access sensitive information on your phone without any user interaction.
Both zero-days, along with 60 other security flaws, have been fixed in recent security patches. Google’s Pixel devices will receive these updates first, while other Android manufacturers may take longer to implement them.
To ensure your Android phone is safe from hackers, install updates and security patches as soon as they are released.
While 62 vulnerabilities may seem high, they are flaws that have been discovered and fixed. It’s important to keep your phone updated, as hackers target those with outdated software, making it easier for them to exploit these issues.
Within Minute, RamiGPT To Escalate Privilege Gaining Root Access