March security bulletin lists 2 vulnerabilities as actively exploited in the wild:
https://source.android.com/docs/security/bulletin/2025-03-01
CVE-2024-43093 patch was in Android 15 QPR1 released in December. It's just being backported now.
CVE-2024-50302 doesn't impact GrapheneOS due to our exploit protections.
GrapheneOS
npub1kw…se0nj
2025-03-04 01:13:16 UTC
in reply to nevent1q…9qm5
Author Public Key
npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0njPublished at
2025-03-04 01:13:16 UTCEvent JSON
{
"id": "69c9b6b149bc1964da9c16aba04ddc3783b46afafa994708edae4012cee3ee29",
"pubkey": "b3ba3c5045fbaf99be9cb4daa9f1d7baeedaba0fc5b91596511e2fb7a70dd7f9",
"created_at": 1741050796,
"kind": 1,
"tags": [
[
"e",
"6bf0ea16d0b205ac717ea625d8cc58e17419d103039188db8dc987fd59f5db2c",
"",
"root",
"b3ba3c5045fbaf99be9cb4daa9f1d7baeedaba0fc5b91596511e2fb7a70dd7f9"
],
[
"p",
"b3ba3c5045fbaf99be9cb4daa9f1d7baeedaba0fc5b91596511e2fb7a70dd7f9"
],
[
"proxy",
"https://grapheneos.social/@GrapheneOS/114101505000819350",
"web"
],
[
"proxy",
"https://grapheneos.social/users/GrapheneOS/statuses/114101505000819350",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://grapheneos.social/users/GrapheneOS/statuses/114101505000819350",
"pink.momostr"
],
[
"-"
]
],
"content": "March security bulletin lists 2 vulnerabilities as actively exploited in the wild:\n\nhttps://source.android.com/docs/security/bulletin/2025-03-01\n\nCVE-2024-43093 patch was in Android 15 QPR1 released in December. It's just being backported now.\n\nCVE-2024-50302 doesn't impact GrapheneOS due to our exploit protections.",
"sig": "15a8cf4e0484fc4221bcf00c30937db358c2af79c6dbd7f302615884fc3b62d82b367305ffda89ea4e1dbcd0f528bfad760cf528df313286b2083db45fa58b20"
}