Multiples vulnérabilités dans Google Android - Déni de service
Summary
CERT-FR issued security advisory CERTFR-2026-AVI-0399 alerting to multiple vulnerabilities in Google Android. The vulnerabilities affect Android versions prior to 14, 15, 16, and 16-qpr2, and could allow attackers to cause denial of service conditions. The advisory references CVE-2025-48651 and CVE-2026-0049, with patches released by Google on April 6, 2026.
What changed
CERT-FR published a security advisory detailing multiple vulnerabilities discovered in Google Android. The vulnerabilities allow an attacker to cause denial of service and potentially other unspecified security issues. Affected systems include all Android versions prior to 14, 15, 16, and 16-qpr2 that have not received the April 6, 2026 security update. The vulnerabilities are tracked under CVE-2025-48651 and CVE-2026-0049.
Organizations and consumers using Android devices should immediately apply the security patches released by Google on April 6, 2026. Failure to patch leaves devices vulnerable to denial-of-service attacks and potential exploitation of unspecified security flaws. Security teams should prioritize updating Android device fleets and verify compliance with the latest security bulletins.
What to do next
- Apply the April 6, 2026 security patches to all affected Android versions (14, 15, 16, 16-qpr2 and earlier)
- Consult Google's Android Security Bulletin at source.android.com for complete patch details
- Monitor for additional CVE references and updates to the vendor bulletin
Archived snapshot
Apr 8, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
Premier Ministre S.G.D.S.N
Agence nationale
de la sécurité des
systèmes d'information
Paris, le 07 avril 2026 N° CERTFR-2026-AVI-0399 Affaire suivie par: CERT-FR
Avis du CERT-FR
Objet: Multiples vulnérabilités dans Google Android
Gestion du document
| Référence | CERTFR-2026-AVI-0399 |
| Titre | Multiples vulnérabilités dans Google Android |
| Date de la première version | 07 avril 2026 |
| Date de la dernière version | 07 avril 2026 |
| Source(s) | Bulletin de sécurité Google Android du 06 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.
Risques
- Déni de service
- Non spécifié par l'éditeur
Systèmes affectés
- Android versions antérieures à 14, 15, 16 et 16-qpr2 avant le correctif du 6 avril 2026
Résumé
De multiples vulnérabilités ont été découvertes dans Google Android. Elles permettent à un attaquant de provoquer un déni de service et un problème de sécurité non spécifié par l'éditeur.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Documentation
- Bulletin de sécurité Google Android du 06 avril 2026
- https://source.android.com/docs/security/bulletin/2026/2026-04-01?hl=fr
- Référence CVE CVE-2025-48651
- https://www.cve.org/CVERecord?id=CVE-2025-48651
- Référence CVE CVE-2026-0049
- https://www.cve.org/CVERecord?id=CVE-2026-0049
Gestion détaillée du document
- le 07 avril 2026 Version initiale
Related changes
Get daily alerts for CERT-FR Security Advisories
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.
The plain-English summary, classification, and "what to do next" steps are AI-generated from the original text. Cite the source document, not the AI analysis.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when CERT-FR Security Advisories publishes new changes.