The February 2025 Android security updates fix 48 vulnerabilities, including a zero-day kernel vulnerability that has already been used in attacks.
The vulnerability is tracked as CVE-2024-53104, is considered very severe, and allows privilege escalation in the USB Video Class driver of the Android Kernel. Locally authorized attackers could escalate privileges on systems, in the context of low-sophistication attacks.
In addition to this actively exploited zero-day bug, the February 2025 Android security updates also fix a critical vulnerability in Qualcomm's WLAN component.
See also: Alibaba Cloud vulnerability allows data upload
Qualcomm describes the vulnerability (CVE-2024-45569) as a firmware memory corruption issue. It can be exploited by remote attackers to execute code or commands, read or modify memory, and cause crashes in low-sophistication attacks that do not require user privileges or interaction.
Android security updates – February 2025: Security patch levels
Google released two sets of updates for February 2025: 2025-02-01 and 2025-02-05. The latter includes all fixes (also from the first batch) and additional updates for third-party and kernel elements, which may not apply to all Android devices.
Google Pixel devices receive updates immediately, while other manufacturers often need more time to test and configure security updates for various hardware configurations.
See also: Vulnerability in D-Link Routers Allows Full Control of the Router
Android security updates for February 2025
Regularly updating Android devices is essential. These security updates, released by Google on a monthly basis, provide critical fixes for known vulnerabilities and help protect users from potential attacks and exploits. It's important to keep your device up to date with the latest updates to ensure the security of your personal information.
In addition to fixing vulnerabilities, these security updates also offer improvements, making your Android experience smoother and more secure. With each update, Google aims to improve the overall performance and security of its operating system, providing a better user experience for everyone.
See also: Broadcom patches vulnerabilities in VMware Aria products
However, despite these efforts by Google, some devices may not receive timely updates for various reasons. It is important for users to check for updates regularly and consider upgrading (replacing) their devices if necessary.
Additionally, in addition to Google's monthly security updates, it's also important for users to practice safe browsing habits and be cautious when downloading apps from unknown sources. These precautionary measures can help prevent potential security threats and provide an added layer of protection for your device.
Source: www.bleepingcomputer.com
