Google fixes Android zero-day exploited by Serbian authorities

Google's March 2025 Android security update patches 43 vulnerabilities, including two zero-days exploited in targeted attacks: a Linux HID kernel information disclosure (CVE-2024-50302) used by Serbian authorities via a Cellebrite exploit chain to unlock confiscated phones, and an Android Framework privilege escalation (CVE-2024-43093) enabling sensitive directory access via unicode normalization bypass; additional RCE and kernel component fixes are also included and fixes were shared with OEMs in January.