Google Patches High-Risk Android Security Flaws
Google pushed out Android update with fixes for more than 30 security flaws. Android security bulletin contains details of 33 security vulnerabilities, some of which could cause privilege escalation or information disclosure.
The most important of these is a bug in the Media framework that could lead to elevation of privilege on Android 8.1 and 9 devices, or information disclosure, on Android 10 and 11. The issue is tracked as CVE-2021-0519.
The 2021-08-01 security patch level also includes fixes for three high severity elevation of privilege flaws in Framework, and a pair of elevation of privilege and three information disclosure bugs in System.
The second part of this month’s security update, the 2021-08-05 security patch level, brings fixes for a total of 24 vulnerabilities affecting Kernel components, MediaTek components, Widevine DRM, Qualcomm components, and Qualcomm closed-source components.
Google also fixed three medium-severity bugs specific to Pixel devices. These include an elevation of privilege in the Pixel component, and two vulnerabilities in Qualcomm components.
Source: securityweek.com
04 August 2021