Google released a big update for Android phones. This update fixes 124 software bugs. One specific bug is very bad. This bug is a weakness in the phone’s main software engine. Hackers already know about this bug. They are using it to attack people.
The Math Muddle In The Core Layer
People call this kind of bug a zero-day. That means hackers found the bug before Google did. The bug has the code name CVE-2025-48595. It affects newer Android versions. This includes Android 14 and Android 15. It also includes Android 16.
The math muddle happens inside the main software engine. When the system counts too high, the numbers roll back to zero. This mistake confuses the phone’s memory. A bad app can use this quirk to escape its safety wall. Usually, Android keeps apps inside separate boxes. This quirk lets a bad app break out of its box. The bad app can then gain full control of the device. The attacker does not need any help from the user. Users do not need to click any links.
US Government Demands Immediate Action
The US government took quick action. The cybersecurity agency added the bug to its list of known active threats. The agency ordered government workers to fix their phones. Workers had to scurry to install the update within three days.
How Users Can Stay Safe
Google’s own Pixel phones got the fix first. Other phone companies must prepare their own updates. This step often takes longer because companies tweak the software for different phone models. Owners of other phones should check their settings often. They must install updates as soon as they arrive. Users can also look for Google Play system updates to get quick security fixes.
