Security News > 2021 > January > Google Warns of Critical Android Remote Code Execution Bug
Google has fixed two critical bugs affecting its Android handsets.
The more serious flaws exists in the Android System component and allow remote attackers to execute arbitrary code.
The critical-severity flaws include a remote-code-execution flaw in Google's Android System component, the core of the Android operating system.
Another flaw, rated serious, is a denial-of-service issue in the Android Framework component, which is a set of APIs that allow developers to quickly and easily write apps for Android phones.
"The most severe of these issues is a critical security vulnerability in the System component that could enable a remote attacker using a specially crafted transmission to execute arbitrary code within the context of a privileged process," according to Google.
The fixes come after a hefty December Android security update, where Google patched ten critical bugs, including one tied to the Android media framework component that could give attacker remote control of vulnerable handsets.
News URL
https://threatpost.com/google-warns-of-critical-android-remote-code-execution-bug/162756/
Related news
- Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution (source)
- Malicious Android Apps Pose as Google, Instagram, WhatsApp, to Steal Credentials (source)
- Apple and Google add alerts for unknown Bluetooth trackers to iOS, Android (source)
- Google Launches AI-Powered Theft and Data Protection Features for Android Devices (source)
- Android 15, Google Play get new anti-malware and anti-fraud features (source)
- Android 15, Google Play Protect get new anti-malware and anti-fraud features (source)
- Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager (source)
- Over 90 malicious Android apps with 5.5M installs found on Google Play (source)
- Google patches exploited Android zero-day on Pixel devices (source)