Security News > 2021 > January > Google Warns of Critical Android Remote Code Execution Bug

Google has fixed two critical bugs affecting its Android handsets.

The more serious flaws exists in the Android System component and allow remote attackers to execute arbitrary code.

The critical-severity flaws include a remote-code-execution flaw in Google's Android System component, the core of the Android operating system.

Another flaw, rated serious, is a denial-of-service issue in the Android Framework component, which is a set of APIs that allow developers to quickly and easily write apps for Android phones.

"The most severe of these issues is a critical security vulnerability in the System component that could enable a remote attacker using a specially crafted transmission to execute arbitrary code within the context of a privileged process," according to Google.

The fixes come after a hefty December Android security update, where Google patched ten critical bugs, including one tied to the Android media framework component that could give attacker remote control of vulnerable handsets.

News URL

https://threatpost.com/google-warns-of-critical-android-remote-code-execution-bug/162756/