Skip to content

Android under attack

Google has released the new Android Security Bulletin for May 2025, featuring important updates to protect devices from various vulnerabilities. Let’s take a closer look at what this update includes and why keeping your device up to date is crucial.

The bulletin, published on May 5 and updated the following day, contains fixes for several vulnerabilities that could compromise the security of your Android smartphone or tablet.

The most critical vulnerability affects the Android System component and could allow unauthorized code execution on the device without requiring additional permissions or user interaction. This type of flaw is particularly concerning because it could be exploited silently.

It is important to note that one of the vulnerabilities, identified as CVE-2025-27363, may already be under targeted attack, although currently limited. This makes updating your device even more urgent.

As usual, Google informed Android partners of all these issues at least a month in advance, and the source code patches will be released to the Android Open Source Project within the next 48 hours.

The updates are divided into two patch levels: May 1, 2025, and May 5, 2025. Manufacturers can choose which level to implement, but it is always recommended to have the latest available version for maximum protection.

The fixed vulnerabilities affect various Android components, including:

  • Framework
  • System
  • Kernel
  • Graphics components (PowerVR GPU, Mali GPU)
  • Components from various manufacturers (Qualcomm, MediaTek)

To check if your device is already protected, go to your phone’s settings, under “About phone” and then “Android version” or “Security updates,” to verify your security patch level.

Remember, keeping your device updated is one of the most important defenses against cybersecurity threats. In addition to updates, Google Play Protect provides an extra layer of security by actively monitoring potentially harmful apps, especially for those who install applications from sources other than the Play Store.

Don’t wait—check today if your Android device needs a security update!

https://source.android.com/docs/security/bulletin/2025-05-01?hl=it

Technical IT Unit – National Microcredit Agency