Google has officially released the Android Security Bulletin for June 2026, and Xiaomi is expected to begin rolling out the June 2026 Android security patch to eligible Xiaomi, Redmi, and POCO devices this week. While Xiaomi’s OTA changelog will likely look very short, the actual security content behind this update is much larger.
The June 2026 patch includes important fixes for Android Framework, System, kernel, GPU, modem, and chipset-level components. It also addresses one vulnerability that Google says may already be under limited and targeted exploitation.
Expected Xiaomi OTA Changelog
Xiaomi usually keeps its monthly security update changelogs very simple. Users may see a changelog similar to this:
- Updated the Android Security Patch to June 2026.
- Increased system security.
- Improved overall system stability.
However, this short changelog does not fully explain what has changed under the hood. The June 2026 Android Security Bulletin contains several critical and high-severity fixes that are important for HyperOS-powered devices.
Main Changes in the June 2026 Security Patch
- Fixed critical Android Framework vulnerabilities.
- Fixed multiple Android System component vulnerabilities.
- Improved protection against remote and local privilege escalation risks.
- Fixed denial-of-service and information disclosure vulnerabilities.
- Added kernel-level security fixes.
- Added Qualcomm, MediaTek, Unisoc, and GPU vendor security patches.
- Improved overall Android platform security for supported devices.
Android Framework Fixes
One of the most important parts of the June 2026 security patch is the Android Framework section. Google says the most severe vulnerability in this component could allow remote escalation of privilege without requiring additional execution privileges. User interaction is not required for exploitation, making this issue especially important.
The Framework section includes fixes for the following notable vulnerabilities:
- CVE-2025-65018 — Critical elevation of privilege vulnerability.
- CVE-2025-64720 — Critical denial-of-service vulnerability.
- CVE-2025-48595 — High-severity elevation of privilege vulnerability.
Google also notes that CVE-2025-48595 may be under limited, targeted exploitation. This makes the June 2026 patch more important than a regular monthly security update.
Android System Component Fixes
The Android System component also received a large number of security fixes. According to Google, the most severe issue in this section could allow local escalation of privilege without requiring additional execution privileges. User interaction is not needed for exploitation.
Some of the critical System vulnerabilities fixed in this update include:
- CVE-2026-0043
- CVE-2026-0097
- CVE-2026-21352
- CVE-2026-21353
- CVE-2025-64505
- CVE-2026-0039
- CVE-2026-0040
- CVE-2026-0041
- CVE-2026-0042
- CVE-2026-0044
- CVE-2026-0051
- CVE-2026-0052
- CVE-2026-0080
These fixes improve protection against privilege escalation, denial of service, information disclosure, and remote code execution risks on Android-based devices.
2026-06-01 vs 2026-06-05 Patch Level
The June 2026 Android Security Bulletin is divided into two security patch levels. This is important because not every device always receives the same patch level at the same time.
2026-06-01 Security Patch Level
- Includes Android Framework security fixes.
- Includes Android System component fixes.
- Targets core Android platform vulnerabilities.
- Applies to supported Android 14, Android 15, Android 16, and Android 16 QPR2 builds.
2026-06-05 Security Patch Level
- Includes all 2026-06-01 security fixes.
- Adds Android kernel security patches.
- Adds Qualcomm component fixes.
- Adds Qualcomm closed-source component fixes.
- Adds MediaTek modem, preloader, and geniezone fixes.
- Adds Unisoc modem security fixes.
- Adds Imagination PowerVR GPU security fixes.
For Xiaomi users, the 2026-06-05 patch level is more important because it includes vendor-level fixes for chipsets and hardware components used in many Xiaomi, Redmi, and POCO devices.
Vendor Security Fixes
The full June 2026 patch also includes several vendor-specific security updates. These are especially important for devices using Qualcomm Snapdragon and MediaTek Dimensity platforms.
- Kernel: Fixed a high-severity vulnerability in the Net subcomponent.
- Imagination PowerVR GPU: Fixed multiple high-severity GPU vulnerabilities.
- MediaTek: Fixed modem, preloader, and geniezone security issues.
- Unisoc: Fixed multiple modem-related vulnerabilities.
- Qualcomm: Fixed Display component vulnerabilities.
- Qualcomm closed-source components: Fixed several critical and high-severity vulnerabilities.
Why This Update Matters for Xiaomi Users
The June 2026 security patch is important for Xiaomi, Redmi, and POCO users because it does not only include basic Android system fixes. It also patches chipset-level vulnerabilities that may affect modem, display, GPU, and other low-level components.
- Many Xiaomi devices use Qualcomm Snapdragon chipsets.
- Many Redmi and POCO models use MediaTek Dimensity chipsets.
- Vendor patches can improve protection beyond the Android operating system itself.
- The update may not add new features, but it improves the security foundation of HyperOS.
Xiaomi June 2026 Security Patch Rollout
Xiaomi is expected to begin releasing the June 2026 security patch this week. The first rollout will likely target selected flagship and upper-midrange models before expanding to more Xiaomi, Redmi, and POCO devices.
Rollout availability may depend on several factors:
- Device model
- Region
- HyperOS version
- Android base version
- Internal testing status
- Carrier and regional approval process
Some devices may receive the update first in China, while Global, EEA, India, Turkey, Indonesia, Taiwan, and other regional builds may follow later.
Should You Install This Update?
Yes. Xiaomi, Redmi, and POCO users should install the June 2026 security patch as soon as it becomes available. This update may not bring visible interface changes, but it includes important protection against critical Android Framework and System vulnerabilities.
- It improves protection against privilege escalation risks.
- It fixes critical Android Framework and System issues.
- It includes vendor-level Qualcomm and MediaTek security patches.
- It addresses a vulnerability that may already be under limited targeted exploitation.
- It strengthens the overall security of HyperOS devices.
Conclusion
The Xiaomi June 2026 security patch is expected to start rolling out this week with important Android security improvements. Although Xiaomi’s official OTA changelog may only mention improved system security, the actual update includes critical Framework fixes, System patches, kernel updates, and vendor-level security improvements for Qualcomm, MediaTek, Unisoc, and GPU components.
This month’s patch is especially important because Google has warned that one vulnerability may already be under limited targeted exploitation. Xiaomi, Redmi, and POCO users should install the update once it becomes available for their device.
Will the Xiaomi Mi 13T get this update?