Google Patches 38 Android Security Vulnerabilities

Google Patches 38 Android Security Vulnerabilities

According to Google Android Security Bulletin for January 2018. Its currently rolling out to support Pixel and Nexus devices including Pixel, Pixel XL, Pixel 2, Pixel 2 XL, Pixel C, Nexus 5X, and Nexus 6P, via the over-the-air update (OTA) system.

Google released Android Oreo 8.1 last month, all these devices will be upgraded. 

2018-01-01 security patch level—Vulnerability details

In the sections below, we provide details for each of the security vulnerabilities that apply to the 2018-01-01 patch level. Vulnerabilities are grouped under the component that they affect. There is a description of the issue and a table with the CVE, associated references, type of vulnerability, severity, and updated AOSP versions (where applicable).

When available, we link the public change that addressed the issue to the bug ID, like the AOSP change list. When multiple changes relate to a single bug, additional references are linked to numbers following the bug ID.

Android runtime

The most severe vulnerability in this section could enable a remote attacker to bypass user interaction requirements in order to gain access to additional permissions.

CVE References Type Severity Updated AOSP versions
CVE-2017-13176 A-68341964 EoP High 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1

Media framework

The most severe vulnerability in this section could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process.

System

The most severe vulnerability in this section could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process.

Android security Vulnerability fixes in Android runtime, media framework, kernel, as well as HTC, LG, MediaTek, NVIDIA, and Qualcomm  components.

We recommend to keep your devices updated to protect yourself from security vulnerabilities

How to Update the Android Devices?

• First connected with Wi-Fi
• Go to Android Settings
• Scroll down and tap Android devices 
• Tap Software update
• Tap Update option when it prompted
• Tap Install or Update
• Tap Install .. Just wait until your devices will be updated.
• Done.