Hi everyone,

Google has just released its April 2025 Android Security Bulletin, patching 62 vulnerabilities, including two critical zero-day flaws that were already being actively exploited.

What is a zero-day? It’s a security bug with no fix available at the time it's discovered or exploited—giving attackers a dangerous head start. That’s why staying updated is so important.

Who gets the update?

The patches apply to Android 13, 14, and 15. While Android vendors are notified about these issues a month before public release, updates may not reach all devices right away.

To check if your phone is up to date:

• Go to Settings
• Look under About phone or About device
• Tap Software updates to see if an update is available

If your phone shows a security patch level of 2025-04-05 or later, you’re covered. This level includes all the fixes from 2025-04-01 plus additional patches for kernel and third-party components. Not every device needs every patch, but the higher level is more complete.

Why this matters

Among the 62 issues fixed, two stand out as especially dangerous. These vulnerabilities exist in the Linux kernel’s USB audio component and can be exploited without any user interaction:

• CVE-2024-53150: An out-of-bounds flaw in the USB-audio driver that can lead to information disclosure. It was caused by a failure to properly check data lengths. It may allow local attackers to access sensitive information on the device.
• CVE-2024-53197: A privilege escalation vulnerability that, when chained with other exploits, was reportedly used in Serbia by law enforcement to access a student activist’s phone using Cellebrite tools.

We don’t yet know the full scope of the exploitation, but the fact that these zero-days were seen in real-world attacks is a good reminder to keep your device up to date.

What you can do

• Check your update settings
• Apply security patches as soon as they’re available
• Stay informed and aware of zero-day risks

As always, feel free to share any questions or insights below!

Stay safe,
— The Trend Micro Community Team

Attention Trend Micro Community!

Trend Micro Community!

Implemented Trend Micro Mobile Security 16.2 Patch for Android, introducing fixes and enhanced features to bolster the security of your Android devices. #AndroidSecurity

Trend Micro Mobile Security 16.2 Patch

• Resolved the false "Suspicious Overlay" detection issue during book purchase cancellation on the Google Play Store by implementing a 0.5-second delay in overlay app and in-app purchase (IAP) package name checks to prevent false detections.

Share Your Thoughts in the comments!

What are your thoughts on the Mobile Security App? Please share your feedback with us; it is valuable to us!

Join the discussion!

Sign in or create an account.

Trend Micro Community!

Discover the latest in Trend Micro Mobile Security for Android! Explore enhanced features to keep your devices secure. Check out the release notes for all the details. #AndroidSecurity

Trend Micro Mobile Security version 16.2.0.5098 Release Notes

• Improved Voice-to-Text User Experience in Air Support Mobile Version 1.3.140.

  Enhancement of Voice-to-Text User Experience. Enjoy a better user experience, aligning with top applications that use this feature.
  
  

  • Voice-to-Text is now the default option.
    
    

         
    
    
    
  • The "Send Chat" button will only appear when the user types a chat message.
    
    

• Update app wording from "Twitter" to "X."

  
  The Trend Micro Mobile Security app will now update all wording related to Twitter to align with the newly branded "X" platform.

• Fixed the issue with Facebook Scan not working.
  

  • Findings: Facebook has recently released an update and changed the URL required for the Social Networking Privacy Scan.
    
    
  • Solution: The Trend Micro Reseach and Dev Team has implemented an update to align with the new URL that Facebook uses, ensuring that the Social Network Privacy Scanner works properly again.
    
    

Share Your Thoughts in the comments!

Explore the latest update in your Mobile Security App and share your thoughts with us. Your feedback is important!

Join the discussion!

Sign in or create an account.

We are thrilled to announce the release of TMMS version 15.6.0.4950, now available for download on the Google Play Store. To ensure you make the most of this update, please take a moment to read through the following release notes highlighting the key improvements:

1. Fake Cleaner App Detection 

• Mobile Security for Android now includes detection for the following unwanted cleaner app  behaviors listed below:
  
  • Continuously displaying fake activity notifications or ads within the app
  • Misleading functionality and false results during cleaning scans.
  • Showing ads could be classified as fake security alerts
    
    
• Check out this Help Center solution to know more about these detection categories:
  • How to remove Potentially Unwanted Cleaner Applications on Android?
  • How to remove Potentially Unwanted Applications on Android?
    
    
• To enable Cleaner PUA/ PUA Detection Alerts, tick the box "Potentially Unwanted Cleaner App Alerts" under Security Scan Feature
  
  
  
  

2. "Memory Booster" has been changed to "App Stop."

3. Enhancements of Accessibility Shortcut Enablement Flow

To prevent unintentional deactivation of accessibility permission and TMMS features, we have enhanced wording and alerts regarding the enabling of Accessibility Shortcut, as it is necessary for various TMMS features.

Note: The Trend Micro Accessibility Shortcut Icon is an Android feature that allows you to easily turn on or off the Accessibility setting of TMMS

Tell us what you think!

 You can also add what features you would like to see in the Comment section.

Join the discussion!

Sign in or create an account.