Android Security Bulletin—August 2022

guest · Aug 2, 2022

August 1, 2022

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2022-08-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version.

Android partners are notified of all issues at least a month before publication. Source code patches for these issues will be released to the Android Open Source Project (AOSP) repository in the next 48 hours. We will revise this bulletin with the AOSP links when they are available.
Click to expand...

The most severe of these issues is a critical security vulnerability in the System component that could lead to remote code execution over Bluetooth with no additional execution privileges needed. The severity assessment is based on the effect that exploiting the vulnerability would possibly have on an affected device, assuming the platform and service mitigations are turned off for development purposes or if successfully bypassed.

Refer to the Android and Google Play Protect mitigations section for details on the Android security platform protections and Google Play Protect, which improve the security of the Android platform.
Click to expand...

guest · Aug 2, 2022

Google Patches Critical Android Flaw Allowing Remote Code Execution via Bluetooth
August 2, 2022

Google on Monday published a security bulletin describing the latest round of patches for the Android operating system. Three dozen vulnerabilities have been fixed, including a critical issue that can be exploited for remote code execution over Bluetooth.

The critical vulnerability is tracked as CVE-2022-20345 and it affects the System component. It has been patched with Android 12 and 12L updates.
Click to expand...

According to Google, an attacker does not require additional execution privileges to remotely execute arbitrary code over a Bluetooth attack. No additional details are available about the vulnerability.

The remaining security bugs have all been assigned a ‘high severity’ rating.
Fixes for these flaws are included in the security patch levels ‘2022-08-01’ and ‘2022-08-05’.
Click to expand...

Log in or Sign up

Android Security Bulletin—August 2022

guest Guest

guest Guest

Log in or Sign up

Android Security Bulletin—August 2022

guest Guest

guest Guest

Useful Searches