diff --git a/.changeset/webrtc-150-7871-04-emudhra-roots.md b/.changeset/webrtc-150-7871-04-emudhra-roots.md
new file mode 100644
index 000000000..565632df5
--- /dev/null
+++ b/.changeset/webrtc-150-7871-04-emudhra-roots.md
@@ -0,0 +1,7 @@
+---
+"client-sdk-android": patch
+---
+
+Update libwebrtc to 150.7871.04, which removes the AAA Certificate Services root from the TURN/TLS trust anchors so certificates from the compromised eMudhra intermediates are rejected.
+
+This version also passes the TLS hostname to the Android platform certificate verifier, so the fallback to the OS trust store no longer fails when the app's `network_security_config` has a `domain-config`.
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index a5a951987..ee0cb1436 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -1,5 +1,5 @@
 [versions]
-webrtc = "150.7871.01"
+webrtc = "150.7871.04"
 
 androidJainSipRi = "1.3.0-91"
 androidx-activity = "1.9.0"