Google opublikowało lipcowy biuletyn bezpieczeństwa systemu Android, w którym zamieszczono poprawki do 24 podatności tego systemu, w tym 7 jest krytycznych.
CVE | Severity | Updated AOSP versions |
Framework | ||
CVE-2020-0122 | High | 8.0, 8.1, 9, 10 |
CVE-2020-0227 | High | 8.0, 8.1, 9, 10 |
Media Framework | ||
CVE-2020-9589 | Critical | 8.0, 8.1, 9, 10 |
CVE-2020-0226 | High | 10 |
System | ||
CVE-2020-0224 | Critical | 8.0, 8.1, 9, 10 |
CVE-2020-0225 | Critical | 10 |
CVE-2020-0107 | High | 10 |
CVE | Severity | Component |
Broadcom components | ||
CVE-2019-9501 | Critical | Broadcom Firmware |
CVE-2019-9502 | Critical | Broadcom Firmware |
Kernel components | ||
CVE-2018-20669 | High | i915 driver |
CVE-2019-18282 | High | Linux Networking Stack |
CVE-2019-20636 | High | Input driver |
MediaTek components | ||
CVE-2020-0230 | High | vcu |
CVE-2020-0231 | High | External Memory Interface |
CVE-2020-0228 | High | Recorder related service |
Qualcomm components | ||
CVE-2020-3698 | Critical | WLAN |
CVE-2020-3699 | Critical | WLAN |
CVE-2019-10580 | High | Kernel |
CVE-2020-3700 | High | WLAN |
Qualcomm closed-source components | ||
CVE-2019-14123 | High | Closed-source component |
CVE-2019-14124 | High | Closed-source component |
CVE-2019-14130 | High | Closed-source component |
CVE-2020-3688 | High | Closed-source component |
CVE-2020-3701 | High | Closed-source component |
CERT PSE zachęca do zapoznania się z lipcowym biuletynem bezpieczeństwa Google Android i stosowanie aktualizacji dostarczanych przez poszczególnych producentów urządzeń.