Google’s recent Android security update addresses 25 vulnerabilities

Google has rolled out patches for 25 security vulnerabilities in the Android operating system, addressing a critical-severity flaw in the Framework component. The vulnerability, tracked as CVE-2024-31320, affects Android versions 12 and 12L, allowing attackers to escalate privileges on compromised devices without needing additional execution rights. This critical issue was fixed in the 2024-07-01 security patch, which also remedied seven other high-severity vulnerabilities, including three privilege escalation bugs in the Framework, three in the System, and one information disclosure flaw in the System.

In addition, the second part of the July 2024 Android security update, known as the 2024-07-05 security patch level, addresses 17 more vulnerabilities in components such as Kernel, Arm, Imagination Technologies, MediaTek, and Qualcomm. Devices updated to the 2024-07-05 security level will be protected against all 25 identified vulnerabilities. Users are strongly encouraged to update their devices as soon as possible.

Google noted that there were no new patches released for Android Automotive this month, but the update includes all the fixes from the 2024-07-05 security patch level. Furthermore, Google has yet to release a detailed security bulletin for Pixel devices. In June 2024, the Pixel security update fixed a zero-day privilege escalation issue, with the security bulletin published approximately two weeks after the main Android security bulletin.

Source: SecurityWeek

To mitigate potential threats, it is important to implement additional cybersecurity measures with the help of a trusted partner like INFRA www.infrascan.net, or you can try yourself using check.website.