[ad_1]
Google has launched the February 2022 Android safety updates, addressing two important vulnerabilities, one being a distant escalation of privilege that requires no consumer interplay.
The vulnerability is tracked as CVE-2021-39675, carrying a “important” severity ranking, and impacts solely Android 12, the most recent model of the favored OS.
These flaws are sometimes leveraged by refined spy ware distributors that independently uncover and privately use zero-days in cellular working techniques. Nevertheless, on this case, Google hasn’t seen any indicators of energetic exploitation.
The second important flaw addressed by the February 2022 safety replace is CVE-2021-30317, which impacts a closed-source part of Qualcomm, and thus solely issues Android units that use that vendor’s {hardware}.
Right here’s a abstract of this month’s fixes:
- 5 high-severity flaws in Framework
- 4 high-severity bugs in Media Framework
- Seven high-severity to important flaws in System
- Two vulnerabilities of undefined severity in Media Supplier
- One high-severity flaw in Amlogic parts
- 5 high-severity bugs in MediaTek parts
- Three high-severity flaws in Unisoc parts
- Six excessive to critical-severity vulnerabilities in Qualcomm parts
As Google clarifies in the bulletin: “The severity evaluation relies on the impact that exploiting the vulnerability might have on an affected system, assuming the platform and repair mitigations are turned off for improvement functions or if efficiently bypassed.”
The technical particulars concerning the vulnerabilities aren’t accessible presently, as Android updates sometimes want a number of months to succeed in a good share of the userbase, provided that distributors must bundle them individually for every system mannequin.
The one exception to this apply is Google’s personal Pixel units, with all fashions from ‘3a’ as much as ‘6 Professional’ already receiving the February 2022 safety replace in a simultaneous roll-out.
Lastly, the fixes that include this month’s replace concern Android 10, 11, and 12, so in case your telephone runs something older than that, you’re now not lined, and you must think about your system a safety legal responsibility.
In case you don’t need to change a superbly working digital system that’s now not supported by its producer, you would flash it with a third-party Android ROM that is primarily based on a newer and safe AOSP model, like LineageOS for instance.
[ad_2]
