Google has released an emergency Android security update after discovering two actively exploited zero-day vulnerabilities.
The first vulnerability, CVE-2024-53197, is a privilege escalation flaw in the USB-audio driver of the Linux kernel, allowing remote privilege escalation without user interaction.
The second vulnerability, CVE-2024-53150, is an 'out-of-bound read' flaw in Android's kernel, enabling local attackers to access sensitive data without the user's knowledge.
Android users are advised to update their devices immediately and follow best security practices to protect against potential threats.