Android’s December 2024 Security Update Patches 14 Vulnerabilities
Google on Tuesday announced patches for 14 high-severity vulnerabilities as part of Android’s December 2024 security update, including a remote code execution flaw in the System component.
The first part of the update, which arrives on devices as the 2024-12-01 security patch level, resolves six security defects in the Framework and System components, five of which could allow attackers to elevate privileges.
According to Google’s advisory, however, the sixth of these bugs, which is tracked as CVE-2024-43767 and impacts System, is the most severe issue, as it could lead to remote code execution (RCE) with no additional execution privileges needed.
Fixes for these defects were included in updated Android 12, 12L, 13, 14, and 15 versions and the source code for these patches has been released to the Android Open Source Project (AOSP) repository.
See more: https://www.securityweek.com/androids-december-2024-security-update-patches-14-vulnerabilities/
#cybersecurity #android
zCat
npub1zm…5pnd6
2024-12-05 06:58:33 UTC
Author Public Key
npub1zm7jduqq2nmxz5wxh4ujtm00g9vxzqa0r82yt7flvm67yje5gfaqa5pnd6Seen on
wss://nos.lolPublished at
2024-12-05 06:58:33 UTCEvent JSON
{
"id": "c99478f5b1d926d83e3490f5bad6f85f056ed8ed29177e7c274eb50bd7f17323",
"pubkey": "16fd26f00054f66151c6bd7925edef41586103af19d445f93f66f5e24b34427a",
"created_at": 1733381913,
"kind": 1,
"tags": [
[
"t",
"cybersecurity"
],
[
"t",
"android"
],
[
"r",
"https://www.securityweek.com/androids-december-2024-security-update-patches-14-vulnerabilities/"
]
],
"content": "Android’s December 2024 Security Update Patches 14 Vulnerabilities\n\nGoogle on Tuesday announced patches for 14 high-severity vulnerabilities as part of Android’s December 2024 security update, including a remote code execution flaw in the System component.\n\nThe first part of the update, which arrives on devices as the 2024-12-01 security patch level, resolves six security defects in the Framework and System components, five of which could allow attackers to elevate privileges.\n\nAccording to Google’s advisory, however, the sixth of these bugs, which is tracked as CVE-2024-43767 and impacts System, is the most severe issue, as it could lead to remote code execution (RCE) with no additional execution privileges needed.\n\nFixes for these defects were included in updated Android 12, 12L, 13, 14, and 15 versions and the source code for these patches has been released to the Android Open Source Project (AOSP) repository.\n\nSee more: https://www.securityweek.com/androids-december-2024-security-update-patches-14-vulnerabilities/\n\n#cybersecurity #android",
"sig": "6c44b2fad923cfd9dc6b6947fdb9e352141a6983ba3b78591b49486a44249f7534befd7cba5b405d841c9b7495701ed1abd91dc8d6b3f36c069bf099e590fb6d"
}