CVE-2025-48593: Critical Zero-Click Vulnerability in Android Enables Remote Code Execution

Google's November 2025 Android Security Bulletin discloses CVE-2025-48593, a critical zero-click remote code execution vulnerability in the Android System affecting Android 13–16 that can allow remote attackers to run arbitrary code without user interaction; users should install security patches (2025-11-01 or later) immediately, and AOSP source fixes are expected within 48 hours. The bulletin also notes a separate high-severity elevation-of-privilege flaw (CVE-2025-48581) affecting Android 16, and the report highlights SOC Prime detection and mitigation tooling to help defenders anticipate and respond to these issues.