Google releases new Android update to fix two exploited vulnerabilities
Updating now prevents hackers from exploiting these two confirmed Android security flaws
If you use an Android phone, your data might be more exposed than you think. Google’s April 2025 security update just fixed 62 security issues, including two serious flaws that hackers were already using in real-world attacks. These weren’t just minor bugs—they allowed remote access to your private data without your permission or even interaction.
One of the flaws, CVE-2024-53150, could silently let someone extract sensitive data from your device. The other, CVE-2024-53197, was part of a secret exploit chain developed by digital forensics firm Cellebrite to bypass phone locks. In one reported case, Serbian authorities used the Cellebrite exploit chain, including the vulnerability CVE-2024-53197, to unlock and access a youth activist’s phone, according to Amnesty International.
Interestingly, CVE-2024-53197 is rooted in the Linux kernel and had already been patched last year, along with CVE-2024-53104 and CVE-2024-50302. But the full exploit chain wasn’t entirely closed until this latest update, which ties up all the loose ends and blocks known attack paths.
If left unpatched, these vulnerabilities could let hackers—or anyone with the tools—gain deep, remote access to your device without needing your permission.
Thankfully, Google says it has now closed that door. It patched all three flaws used in the Cellebrite exploit chain: CVE-2024-53150, CVE-2024-53197, and CVE-2024-53104. The update comes in two levels. 2025-04-01: Covers core Android vulnerabilities. 2025-04-05: Adds fixes for flaws in Linux kernel components, Arm, MediaTek, Imagination Technologies, and Qualcomm.
Google Pixel users will get the update automatically. If you use a phone from Samsung, Xiaomi, or other brands, the patch might take longer to arrive depending on your device maker.
While Android security is constantly evolving, this update is a reminder that cyber threats are real, and updates are key to staying protected. Most of the time, all you need to do is install updates when prompted.
Beyond the tech side, this situation shows how digital tools can be misused for surveillance. That’s why staying updated isn’t just about security—it’s also about protecting your digital privacy in an increasingly connected world.
This update isn’t just routine—it’s a critical fix that could protect your most sensitive data. So, if you're an Android user, take a minute to check your update settings. A quick restart could mean the difference between privacy and exposure.