Sign in to your Android Police account

Summary
- Google to release an update fixing two critical zero-day bugs.
- The vulnerability could lead to attacks without user interaction.
- The source code patches will be available in the Android Open Source Project repository.
New updates to Android are pretty common, and provide a wealth of enhancements to the experience. But perhaps some of the most important ones are security updates, which protect users from flaws that could otherwise leave them open to attacks or other malicious exploits.
Related
For the most part, Google has been pretty good at getting these things covered, and has announced a new update that will be going out to fix two critical zero-day bugs (via TechCrunch). You’ll definitely want to get your devices up to date, because these vulnerabilities could cause some chaos if you’re not careful.
A necessary update for all Android users
Google shares that one of these bugs is “a critical security vulnerability in the System component that could lead to remote escalation of privilege with no additional execution privileges needed.” The scary part about this is that it doesn’t require any interaction from the user. Of course, there are protections in place to prevent these kinds of things from happening, like Play Protect.
Those that aren’t running Google devices will be happy to know that the brand has shared this information with others, which means that other companies should be looking into closing these gaps on their devices as well. While they aren’t available quite yet, Google does share that the source code patches will be available in the Android Open Source Project (AOSP) repository.
As far as when, Google did share that it will update the repository in 48 hours. For the time being, the links to these changes aren’t available but should come with a future update. While this update is a minor one, we’re expecting big things from Google, thanks to an earlier-than-usual release of the next version of Android. Android 16 is slated to arrive sometime in June 2025.
Leave a Reply