MobileNews

December security patch rolling out to Google Pixel, factory images & OTAs live

The last Pixel software update for 2020 is rolling out today with the December security patch. It’s rolling out for the Pixel 3, Pixel 3a, Pixel 4, Pixel 4a, Pixel 4a (5G), and Pixel 5..

December marks the last release for 2017’s Pixel 2 and Pixel 2 XL. The phones were not updated last month, but November’s patches are included today. The factory and OTA images are not yet available.

This update coincides with the latest Pixel Feature Drop.

There are 13 issues resolved in the December security patch dated 2020-12-01 and 33 for 2020-12-05. Vulnerabilities range from high to critical, with the most severe relating to the media framework and a remote attacker possibly executing arbitrary code through a crafted file. 

In the last Android Security & Privacy Year in Review, Google notes that “no critical security vulnerabilities affecting the Android platform were publicly disclosed without a security update or mitigation available for Android devices.” Additionally, there was an 84% year-over-year jump in security patches during Q4 2018 compared to the prior year.

The dedicated bulletin for Google devices lists 82 security fixes and various functional updates that coincide with the latest Feature Drop.



  • Pixel 4a: Android 11 — RQ1A.201205.008 — Factory Image — OTA
  • Pixel 4 XL: Android 11 — RQ1A.201205.008, RQ1A.201205.008.A1 (ATT) — Factory Image (2) — OTA (2)
  • Pixel 4: Android 11 — RQ1A.201205.008, RQ1A.201205.008.A1 (ATT) — Factory Image (2) — OTA (2)
  • Pixel 3a XL: Android 11 — RQ1A.201205.003 — Factory Image — OTA
  • Pixel 3a: Android 11 — RQ1A.201205.003 — Factory Image — OTA
  • Pixel 3 XL: Android 11 — RQ1A.201205.003 (All except Verizon) — Factory Image — OTA
  • Pixel 3: Android 11 — RQ1A.201205.003 (All except Verizon) — Factory Image — OTA
  • Pixel 2 XL: Android 11 — QQ3A  — Factory Image — OTA
  • Pixel 2: Android 11 — QQ3A — Factory Image — OTA


Author: Abner Li
Source: 9TO5Google

Related posts
AI & RoboticsNews

Remaining Windsurf team and tech acquired by Cognition, makers of Devin: ‘We’re friends with Anthropic again’

AI & RoboticsNews

Anthropic launches finance-specific Claude with built-in data connectors, higher limits and prompt libraries

AI & RoboticsNews

Finally, a dev kit for designing on-device, mobile AI apps is here: Liquid AI’s LEAP

AI & RoboticsNews

Salesforce used AI to cut support load by 5% — but the real win was teaching bots to say ‘I’m sorry’

Sign up for our Newsletter and
stay informed!