Google today provided details concerning the November security update for Android. Google says the newest patch solves a number of vulnerabilities in the Android source code impacting the framework, media framework, and core system. Many of the problems spotted were rated “high” or “critical” in terms of severity. The majority of “critical” issues could lead to remote code execution, wherein a hacker might launch malicious apps. As far as Google knows, none of the security holes have been exploited. Google revealed these problems to its phone-making partners last month. The company is providing two updates, one dated November 1 and the other dated November 5. These updates should reach Google’s branded Pixel and Nexus devices over the next week or so. The company plans to distribute the patched code to AOSP within 48 hours. It is up to individual device makers to update their own hardware with the patched platform.
Write a comment