Google published the Android Security Bulletin for September 2021 with patches for a total of 40 vulnerabilities, including seven that are rated critical.

A total of 16 issues were patched with the first part of security updates – the 2021-09-01 security patch level – including one critical DoS vulnerability in the Framework component. Tracked as CVE-2021-0687, the security bug affects Android 8.1, 9, 10, and 11.

Six other vulnerabilities were patched in the Framework component, all considered high-severity. These include five elevation of privilege flaws and one information disclosure vulnerability.

Google also released patches for two high severity information disclosure issues in Media framework, and seven vulnerabilities in the System component.

This month’s Android patches also include a Google Play system update to address the CVE-2021-0690 vulnerability.

The second part of September 2021’s set of patches arrives on devices as the 2021-09-05 security patch level and includes fixes for a total of 23 vulnerabilities in Kernel components, MediaTek components, Unisoc components, Qualcomm components.

Google also announced patches Pixel devices address a total of nine vulnerabilities in Kernel, Pixel, Qualcomm components.

Source: securityweek.com