Google today announced Android 10’s launch on all Pixel phones. In addition to gesture navigation and system-wide Dark theme, it features the September security patch. If it hasn’t rolled out to your device, Google has posted the official OTA and factory images.
Beta 6 only includes the August security patch, while Google last month posted Android Q Security Release Notes. That broader publication included 2 vulnerabilities relating to the Android runtime, 24 for Framework, and 2 in Library. Media framework lists 68 and System 97.
There is another bulletin today with 13 issues resolved in the Android 10 September patch dated 2019-09-01 and 36 for 2019-09-05. Vulnerabilities range from high to critical, with the most severe relating to the media framework and a remote attacker possibly executing arbitrary code through a crafted file.
In the Android Security & Privacy 2018 Year in Review, Google notes that “no critical security vulnerabilities affecting the Android platform were publicly disclosed without a security update or mitigation available for Android devices.” Additionally, there was an 84% year-over-year jump in security patches during Q4 2018 compared to the prior year.
According to Google, there were “no reports of active customer exploitation or abuse of these newly reported issues.” The dedicated bulletin for Google’s phones and tablets lists 103 security fixes.
Author:
Source: 9TO5Google
