Android Security Bulletin—March 2020

guest · Mar 3, 2020

Android Security Bulletin—March 2020
March 2, 2020
https://source.android.com/security/bulletin/2020-03-01

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2020-03-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version.

The most severe of these issues is a critical security vulnerability in the media framework that could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process. The severity assessment is based on the effect that exploiting the vulnerability would possibly have on an affected device, assuming the platform and service mitigations are turned off for development purposes or if successfully bypassed.
Click to expand...

guest · Mar 3, 2020

Google Patches Critical Remotely Exploitable Android Bug
March 3, 2020
https://www.securityweek.com/google-launches-free-fuzzer-benchmarking-service

The critical bug was patched as part of the 2020-03-01 security patch level, which addresses a total of 11 vulnerabilities in framework, media framework, and system.
The critical vulnerability is a remote code execution flaw tracked as CVE-2020-0032, which impacts devices running Android 8.0, 8.1, 9, and 10.

According to Google's advisory, the vulnerability "could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process."
Other two flaws were addressed in the media framework, both rated high severity, namely an elevation of privilege (CVE-2020-0033) and an information disclosure (CVE-2020-0034). The former impacts Android 8.0, 8.1, 9, and 10, while the latter only impacts Android 8.0 and 8.1.
Click to expand...

Log in or Sign up

Android Security Bulletin—March 2020

guest Guest

guest Guest

Log in or Sign up

Android Security Bulletin—March 2020

guest Guest

guest Guest

Useful Searches