Security updates released this week by Googlepatch several vulnerabilities in the Android operating system that could allow remote code execution.
The most serious of the flaws affects system and could allow an attacker to execute code with elevated privileges via a specially crafted file. In fact, Google has addressed two critical system flaws, one in Android 8.0 and newer releases (CVE-2020-0224) and the other only in Android 10 (CVE-2020-0225).
Another critical vulnerability fixed with the update was an information disclosure issue (CVE-2020-0107) that only affects Android 10.
Additionally, the media framework received a fix for a critical elevation of privilege bug (CVE-2020-0226) affecting devices running Android 10.
All five vulnerabilities are addressed in the July 2020 updates. The same patches also fix two serious elevation of privilege flaws in the framework component, affecting Android 8.0 and later.
The second part of this month's update brings fixes for two more critical remote code execution bugs (CVE-2019-9501 and CVE-2019-9502), which affect Broadcom firmware.
Two other critical issues were resolved in the Qualcomm WLAN (CVE-2020-3698and CVE-2020-3699). The update also addresses two high-severity issues in the Qualcomm kernel (CVE-2019-10580) and WLAN (CVE-2020-3700).
Devices updated to the 2020-07-05 security patch level will also receive patches for high-risk flaws in kernel components (three bugs), MediaTek components (three bugs), and Qualcomm close-source components (five bugs). In total, this month's updates address 25 vulnerabilities.
In addition to these patches, Pixel running the 2020-07-05 security update level will receive fixes for four moderate severity bugs affecting Qualcomm components and Qualcomm close-source components.
