Google surprised Pixel users in July, with a monthly security update lacking any actual security updates. But we’re back on train for August. Google has confirmed a “critical security vulnerability” that opens phones to remote attacks.
Ironically, despite all its other security benefits, this threat only affects Android 16. So there’s some good news for Samsung users who would otherwise continue to harbor frustration at the company’s latest Android upgrade delays—maybe.
Google warns CVE-2025-48530 “could lead to remote code execution in combination with other bugs, with no additional execution privileges needed.” It emphasizes that “user interaction is not needed for exploitation” of this System level flaw.
This isn’t the only fix, with a number of high-severity vulnerabilities addressed as well. But the critical bug will generate the most attention, especially as it affects just the latest version of the Android OS. As ever, Pixels have been first to this new software.
The update will now be released for Pixels and you can expect it to roll out to phones within days. Again a stark difference between Google’s phones and Samsung’s, with Android’s leading OEM still subject to a patchwork quilt of updates by region, model and carrier, and lacking “seamless” updates across almost all devices.
As ever you can check your Pixel device has the latest security updates installed.
Owners of other smartphones, Samsung included, should check their own monthly bulletins to confirm the fixes, the timing and the model eligibility. Samsung’s own August monthly security release has also just been issued.
