Google Releases Patches for Android Zero-Day Flaws Exploited in the Wild

Google's December Android Security Bulletin discloses 107 vulnerabilities in AOSP/Android, with patches initially published for 51 flaws and the remainder scheduled for release. Notably, CVE-2025-48633 and CVE-2025-48572 are high-severity framework issues affecting Android 13–16 and may be under limited targeted exploitation (information disclosure and privilege elevation respectively), and CVE-2025-48631 is a critical framework flaw that can cause remote denial of service.