Security News Google July 2018 Android patches fixes critical vulnerabilities

[LASER_oneXM]

Content source

https://securityaffairs.co/wordpress/74230/security/google-july-2018-android-patches.html

This week Google released the July 2018 Android patches that address tens of vulnerabilities in the popular mobile operating system.

Google released the July 2018 Android patches that address a total of 11 vulnerabilities, including three Critical issues and 8 High-risk flaws that affect the framework, media framework, and system.

The critical vulnerabilities are remote code execution issues, the other flaws include information disclosure bugs, denial of service and elevation of privilege issues.

The most severe vulnerability affecting the Framework (CVE-2018-9433) could be exploited by a remote attacker using a specially crafted pac file to execute arbitrary code within the context of a privileged process.

“The most severe vulnerability in this section could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process,” reads the security advisory.

The most severe vulnerability in System (CVE-2018-9365) component could be exploited by a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process.

The most severe vulnerability in the Media framework component (CVE-2018-9411) could be exploited by a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process.

Affected Android versions are Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1.

 

[Ink]

Sony Mobile is currently rolling out a new firmware update for its flagship Xperia XZ2 and Xperia XZ2 Compact devices. The new firmware moves the build from 51.1.A.4.225 to version number 51.1.A.4.265, which includes the July 2018 Android security patches.

XperiaBlog.net via