Patch Android! June 2019 update fixes eight critical flaws

ZMsiXone · Jun 5, 2019

https://nakedsecurity.sophos.com/20...-june-2019-update-fixes-eight-critical-flaws/

June patches
Despite the modest vulnerability count, the fact that 8 are marked ‘critical’ and 14 ‘high’ is good enough reason to want them as soon as possible, with 2 of the criticals (CVE-2019-2094 and CVE-2019-2095) affecting only version 9. Seven are elevation of privilege (EoP), four are remote code execution (RCE), leaving the remaining flaws without designation.

By policy, Google doesn’t furnish much detail on individual flaws, but does mention that the most serious of this month’s vulnerabilities is in media framework which might allow:

A remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process.

Meanwhile, CVE-2019-2097 in the Android system could:

Enable a remote attacker using a specially crafted PAC file to execute arbitrary code within the context of a privileged process.

Luckily, the advisory continues, Google has had no reports that any of the serious flaws are being exploited.
Click to expand...

jaypeecee · Jun 17, 2019

Thanks for letting us know.

chrisretusn · Jun 30, 2019

I received notification yesterday June 29, 2019 from my Samsung phone. Installed now.

Log in or Sign up

Patch Android! June 2019 update fixes eight critical flaws

ZMsiXone Registered Member

jaypeecee Registered Member

chrisretusn Registered Member

Log in or Sign up

Patch Android! June 2019 update fixes eight critical flaws

ZMsiXone Registered Member

jaypeecee Registered Member

chrisretusn Registered Member

Useful Searches