Google launches the Android Partner Vulnerability Initiative to improve non-Pixel devices' security

guest · Oct 3, 2020

Google launches the Android Partner Vulnerability Initiative to improve the security of non-Pixel devices
October 2, 2020
https://www.xda-developers.com/google-launches-android-partner-vulnerability-initiative/

We do more than ever on our smartphones these days, which makes device security incredibly important. With that in mind, Google’s Android Security & Privacy team on Friday announced a new initiative to help improve the security of non-Pixel devices.

Known as the Android Partner Vulnerability Initiative (APVI), the program will let users known when it has discovered security concerns that affect devices shipped by OEMs.

“The APVI covers Google-discovered issues that could potentially affect the security posture of an Android device or its user and is aligned to ISO/IEC 29147:2018 Information technology — Security techniques — Vulnerability disclosure recommendations,” Google said.
Click to expand...

Google currently has a number of programs that allow developers to report vulnerabilities to Google, including the Android Security Rewards Program (ASR) and the Google Play Security Rewards Program. Google then releases ASR reports in Android Open Source Project (AOSP) based code through Android Security Bulletins (ASB), which must be adopted by OEMs before rolling out the current month’s Android security patch level (SPL).

The introduction of APVI adds another security layer.
Click to expand...

If you’d like to check on the progress of APVI, you can visit this website, where Google will disclose any security issues it discovers under the program. There, you can already see Google has disclosed issues that affected devices released by OPPO, ZTE, Huawei, and more.
Click to expand...

Google: Announcing the launch of the Android Partner Vulnerability Initiative

Google’s Android Security & Privacy team has launched the Android Partner Vulnerability Initiative (APVI) to manage security issues specific to Android OEMs. The APVI is designed to drive remediation and provide transparency to users about issues we have discovered at Google that affect device models shipped by Android partners.
Click to expand...

Log in or Sign up

Google launches the Android Partner Vulnerability Initiative to improve non-Pixel devices' security

guest Guest

Log in or Sign up

Google launches the Android Partner Vulnerability Initiative to improve non-Pixel devices' security

guest Guest

Useful Searches