Google Released a security update for Android Devices and fixed 16 critical vulnerabilities that affected the recent Android versions.
All the vulnerabilities fixed under the severity of “critical” and “High” that allows an attacker to execute arbitrary code on the vulnerable Android Devices.
Most of the critical vulnerability fixed under Media Framework that enables to escalate the privilege to multiple android version.
Totally 37 flaws were patched, with 26 rated as high severity.The severity assessment is based on the effect that exploiting the vulnerability would possibly have on an affected device.
Also Read: Mobile Security Testing to Protect Your Applications From Cyber Threats
The most severe vulnerability in this section could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process.
| CVE | References | Type | Severity | Updated AOSP versions |
|---|---|---|---|---|
| CVE-2017-13248 | A-70349612 | RCE | Critical | 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
| CVE-2017-13249 | A-70399408 | RCE | Critical | 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
| CVE-2017-13250 | A-71375536 | RCE | Critical | 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
| CVE-2017-13251 | A-69269702 | EoP | Critical | 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
| CVE-2017-13252 | A-70526702 | EoP | High | 8.0, 8.1 |
| CVE-2017-13253 | A-71389378 | EoP | High | 8.0, 8.1 |
The most severe vulnerability in this section could enable a proximate attacker to execute arbitrary code within the context of a privileged process.
| CVE | References | Type | Severity | Updated AOSP versions |
|---|---|---|---|---|
| CVE-2017-13255 | A-68776054 | RCE | Critical | 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
| CVE-2017-13256 | A-68817966 | RCE | Critical | 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
| CVE-2017-13272 | A-67110137 | RCE | Critical | 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
| CVE-2017-13266 | A-69478941 | RCE | Critical | 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
| CVE-2017-13257 | A-67110692 | ID | High | 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
| CVE-2017-13258 | A-67863755 | ID | High | 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
| CVE-2017-13259 | A-68161546 | ID | High | 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
| CVE-2017-13260 | A-69177251 | ID | High | 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
| CVE-2017-13261 | A-69177292 | ID | High | 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
| CVE-2017-13262 | A-69271284 | ID | High | 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 |
Apart from this, Google released a security fix for Android Kernel components, NVIDIA and Qualcomm components used in Android handsets.
Along with this Android security patches, Samsung Mobile provides 5 Samsung Vulnerabilities and Exposures (SVE) for USB gadget driver,NFC activated by magnet, Clipboard content using Edge panel.
Exploitation for many issues on Android is made more difficult by enhancements in newer versions of the Android platform. We encourage all users to update to the latest version of Android where possible. Google said.
Authorities have delivered a major blow to the cybercrime world by dismantling two of the…
Microsoft has announced updates to its Microsoft 365 (M365) Bug Bounty Program, offering expanded services,…
Tata Technologies, a leading provider of engineering and IT services, has reported a ransomware attack…
A groundbreaking technique for Kerberos relaying over HTTP, leveraging multicast poisoning, has been recently detailed…
Since mid-2024, cybersecurity researchers have been monitoring a sophisticated Android malware campaign dubbed "Tria Stealer,"…
Proton, the globally recognized provider of privacy-focused services such as Proton VPN and Proton Pass,…