Google has just released the Android Security Bulletin for December, which includes an exhaustive list of vulnerabilities affecting Android devices. Unlike manufacturer-specific updates like Pixel’s security updates from Google, this bulletin contains issues that affect all Android devices.
Google is set to release a new Android Security Update soon
These vulnerabilities, which affect devices running Android 13 or later, will be patched in the latest Android Security Update, scheduled for Dec. 5. The update will arrive on your phone when the manufacturer sends it to your device. Within 48 hours of the bulletin’s publication, the corresponding source code patches will be released to the Android Open Source Project (AOSP) repository. The bulletin will then be revised with the AOSP links.
Google has addressed several vulnerabilities, rating them as either “critical” or “severe.” According to the security bulletin, the most severe of these issues is a critical security vulnerability in the Android Framework that could be exploited to cause a denial-of-service attack against users, even with additional privileges.
Similar vulnerabilities exist at the system and kernel levels, which can be exploited to escalate permissions even with the user’s input. Interestingly, the bulletin also lists vulnerabilities specifically to Qualcomm, MediaTek, and Unisoc chipsets. Google has also added that the December security update will not address anything for the Google Play Store.
Google has been busy
Google has been adding many features and addressing many issues across its brands as of late, particularly YouTube. Recently, Google decided to bring the popular Recap feature from YouTube Music to the central YouTube platform, which gives the account holder an end-of-the-year, shareable look at their viewing habits. One thing YouTube might not want to look back on is its past seven days when it had several bugs, including an ad glitch and features seemingly disappearing.
Interestingly, even Google’s line of phones has seen several issues, with the most recent being the UI repeatedly opening recently closed apps, even after users tap the icon of a completely different app. There is a slight chance that Google will quietly fix this issue in the December Security Update, but it could be saved for a minor update when Google focuses on UI bugs like this.
