Security Advisory – March, 2026: Android 13 Platform Upgrade Delivers Cumulative Android Security Patches
Advisory ID: NEAT-SA-2025-03-21-1
Publication date: March 21, 2026
Last updated: March 21, 2026
Severity: Not independently scored by Neat
CVSS vector: Not applicable — see individual CVEs in the referenced Android Security Bulletin
CVE ID: Multiple — corresponds to the CVEs addressed in the Android Security Bulletin for the patch level bundled with Android 13 in NeatOS 25.4.2.
Summary
With the NeatOS 25.4.2 Stable release, five Neat device lines upgraded their underlying operating system from Android 10 to Android 13. Android version upgrades of this kind bring the device’s Android security patch level forward, remediating the cumulative set of platform vulnerabilities Google has published and fixed in Android Security Bulletins between the device’s prior patch level and the level included in Android 13 at time of release.
Affected Products
| Product | Affected versions | Fixed version |
| Neat Pad | NeatOS 25.4.2 and earlier (Android 10) | NeatOS 25.4.2 (Android 13 build) |
| Neat Bar Generation 2 | NeatOS 25.4.2 and earlier (Android 10) | NeatOS 25.4.2 (Android 13 build) |
| Neat Bar Pro | NeatOS 25.4.2 and earlier (Android 10) | NeatOS 25.4.2 (Android 13 build) |
| Neat Board 50 | NeatOS 25.4.2 and earlier (Android 10) | NeatOS 25.4.2 (Android 13 build) |
| Neat Board Pro | NeatOS 25.4.2 and earlier (Android 10) | NeatOS 25.4.2 (Android 13 build) |
Impact
Impact varies by individual CVE; see the Android Security Bulletin for the relevant patch level for a full list of vulnerabilities addressed and their severity. In general, upgrading closes the exposure window for previously disclosed and patched Android/AOSP platform vulnerabilities that existed on the prior OS version.
Details
This is a platform-level security update delivered as part of a broader OS version upgrade rather than a Neat-specific code fix. Neat devices inherit the security posture of the underlying Android platform; keeping devices on a current, supported Android version with an up-to-date security patch level is Neat’s primary mechanism for addressing AOSP and Android platform vulnerabilities. Devices upgrade via an interim Android-10-based transition build before completing the Android 13 upgrade automatically overnight; this does not require a factory reset.
Remediation
Update to NeatOS 25.4.2. Devices configured for automatic updates on the Stable channel should already be running this version or later. Organizations using Neat Pulse can check their rollout schedule under Updates > NeatOS Roadmap.
Acknowledgements
Not applicable — patches originate from the Android Open Source Project and Google’s Android security program, not an external report to Neat.
References
Contact
Questions about this advisory can be directed to security@neat.no.