Android patches Qualcomm zero-day exploited in attacks

Photo by BleepingComputer on BleepingComputer

What happened

Google released March Android security updates addressing 129 vulnerabilities, including an actively exploited zero-day affecting a Qualcomm graphics/display-related component used in Android devices.

Why this matters

• Active exploitation means attackers are already using this bug in real-world campaigns.
• Android fragmentation can delay patch adoption across vendors and carriers.
• High-severity memory corruption flaws can enable privilege escalation, data access, or device compromise.

What users and admins should do

1. Install the latest Android security update immediately on supported devices.
2. Prioritize patching high-risk populations first (executives, journalists, admins, and users handling sensitive data).
3. Verify enterprise mobile management baselines enforce minimum patch levels.
4. Retire or isolate devices that are no longer receiving vendor updates.

Bottom line

This is a patch-now event. If a device has not received March updates yet, treat it as elevated risk until patched or replaced.