It’s a new month which means another security patch from Google has been released and it’s currently rolling out to
Pixel and select
Nexus devices. The September 5, 2018 patch includes fixes for almost
60 vulnerabilities that were found in the AOSP repository. The update also includes in-car Bluetooth performance improvements for Pixel devices.
Google resolved 24 problems on September 1, 2018, and patched an additional 35 on September 5, 2018. Out of all of these fixed issues, the most severe was a security vulnerability in the Media framework. Before the patch, a remote attacker could execute arbitrary code using a “specially crafted file … within the context of a privileged process.”
Fortunately, just like with most issues that’re fixed through security patches, Google states that it has not received a single report of an attacker using this vulnerability to harm a customer.
