Google starts rolling out April 2025 security update, here's why you should install it right away

With its latest April 2025 Android security update, Google has addressed 62 vulnerabilities, including two zero-days, which were actively exploited in targeted attacks. The update was released earlier this week, and Google has confirmed that it is aware of the possibility of these two high-severity vulnerabilities being exploited to target users of Android smartphones. Pixel devices will receive these updates immediately, while other Android OEMs typically require additional time to test and adapt the patches for their devices.

Google fixes zero-day vulnerabilities: Here’s what happened

According to a new report by Bleeping Computer, fixes for two flaws identified as CVE-2024-53150 and CVE-2024-53197 have been released by Google, which were found in the USB subcomponent of the Android Kernel. The latter could allow hackers to remotely gain elevated privileges on an affected smartphone, and could even gain access to the affected device without any user interaction.

Serbian authorities reportedly used this vulnerability as part of a zero-day exploit chain to unlock confiscated Android devices, with the chain allegedly being developed by Israeli digital forensics firm Cellebrite. The report also adds that Pixel devices will receive the update first, and these patches were already shared with its OEM partners back in January.