Andorra Cybersecurity Agency Urges Android Users to Update Now Over Critical Flaws

**Andorra's National Cybersecurity Agency urges Android users to update devices immediately amid critical vulnerabilities**

The Agència Nacional de Ciberseguretat d’Andorra (ANC-AD) has called on all Android device owners in the Principat to apply security updates without delay, following Google's monthly security bulletin for June. The advisory highlights dozens of serious flaws affecting millions of devices worldwide, including those in use across Andorra.

These vulnerabilities could enable cybercriminals to gain unauthorised access to phones without users noticing or taking any action. A standout issue involves a critical flaw in Android's core Framework component, potentially allowing remote attackers to acquire elevated privileges on affected devices. Sources note indications that one specific vulnerability, CVE-2025-48595, is already under limited real-world exploitation, marking it as an active rather than hypothetical threat.

The problems span Android versions 14, 15, 16, and 16-QPR2—covering most current smartphones. They impact the operating system's kernel as well as chips from manufacturers including Qualcomm, MediaTek, Unisoc, and Imagination Technologies, found in hundreds of models from various brands.

ANC-AD advises users to take these steps right away:

- Install updates ensuring the security patch level is from 5 June 2026 or later, which addresses all listed issues. - Check the device's patch date; anything before June 2026 leaves it exposed. - Keep Google Play Protect enabled, Android's built-in tool for detecting harmful apps, especially on devices with Google Mobile Services. - Steer clear of apps from unofficial sources.

The agency emphasises that smartphones now store highly sensitive data such as banking details, private messages, photos, and credentials for essential services. Updating is vital not just for individuals but for collective security, as citizens, businesses, and public bodies all face potential risks. ANC-AD stresses proactive measures to counter such digital threats and safeguard critical infrastructure.