Google rolls out update with security patch to fix zero-day vulnerabilities in Android phones

Google has released a new security update for all eligible Android phones worldwide. The update includes several bug fixes and also plugs two zero-day security vulnerabilities.

For the uninitiated, a zero-day means a software security vulnerability whose existence the concerned experts (in this case, engineers at Google's Android) were previously unaware of, but some hackers may have used it to attack systems.

The latest March 2025 update fixes two such zero-day bugs, which were exploited by threat actors in select global regions.

It has come to light that some state-sponsored espionage team using Cellebrite’s mobile forensic tools may have exploited the CVE-2024-50302 vulnerability to hack the Android phones of student activists of Serbia.

Google has not revealed specific details, but has marked them as CVE-2024-43093 and CVE-2024-50302. This measure is to maintain the secrecy of the issue from other bad actors, as they may use it to target other Android phone owners, who haven't updated their devices yet.

Android users are advised to update their devices at the earliest to safeguard themselves from such cyber threats.

Here's how to update your Android phone:

Step 1: Go to Settings >> System & updates and check for updates and tap the download.

Step 2: Once downloaded, the device will request an update installation. Follow the on-screen instructions. And, after the installation is done, the device will ask for a reboot. Do it and the software update process gets completed.

Get the latest news on new launches, gadget reviews, apps, cybersecurity, and more on personal technology only on DH Tech.