On Monday, Google released security updates for August 2020. The updates concern the Android operating system, with patches for more than 50 vulnerabilities.
As Google reports, the most important of the bugs fixed with the new updateis an issue in the Framework that could be remotely exploited by an attacker to execute arbitrary code within an unprivileged process, using a malicious file.
"The severity rating is based on the impact that exploiting the vulnerability could have on an affected device , assuming that platform and service mitigations have been disabled for development purposes or if successfully bypassed," Google noted.
Security update 2020-08-01 fixes 14 high-severity vulnerabilities in the Framework, Media Framework, and the Android system.
The most serious flaws in the Media Framework and the system allow a malicious application to escalate an attacker, without requiring any user interaction.
The 2020-08-05 update fixes 40 vulnerabilities in the AMLogic, Kernel, MediaTek, and Qualcomm of the Android operating system.
The vulnerability in AMLogic, patched this month, could allow a local attacker to execute arbitrary code with elevated privileges using a specially crafted file. In the kernel, developers fixed three high-severity bugs that could lead to information disclosure or privilege escalation attacks.
There are five high-severity vulnerabilities in MediaTek chips that could be exploited to escalate privileges or steal information from Android phones. All of the issues affect the media editor.
Additionally, over 40 flaws have been fixed in Qualcomm components. Most of them in closed-source components. While most are classified as high severity, about 6 of them are rated as critical.
Google also announced that it has fixed a few vulnerabilities specific to Pixel.
