Google opublikowało sierpniowy biuletyn bezpieczeństwa systemu Android, w którym zamieszczono poprawki do 36 podatności tego systemu, w tym 5 są krytyczne.
CERT PSE zachęca do zapoznania się sierpniowym biuletynem bezpieczeństwa Google Android i stosowanie aktualizacji dostarczanych przez poszczególnych producentów urządzeń.
|
CVE |
Severity |
Updated AOSP versions |
|
Framework |
||
|
CVE-2021-0640 |
High |
9, 10, 11 |
|
CVE-2021-0645 |
High |
11 |
|
CVE-2021-0646 |
High |
8.1, 9, 10, 11 |
|
Media Framework |
||
|
CVE-2021-0519 |
High |
8.1, 9, 10, 11 |
|
System |
||
|
CVE-2021-0591 |
High |
8.1, 9, 10, 11 |
|
CVE-2021-0593 |
High |
8.1, 9, 10, 11 |
|
CVE-2021-0584 |
High |
8.1, 9, 10, 11 |
|
CVE-2021-0641 |
High |
8.1, 9, 10, 11 |
|
CVE-2021-0642 |
High |
8.1, 9, 10, 11 |
|
Google Play system updates |
|
|
Component |
CVE |
|
Statsd |
CVE-2021-0640 |
|
Media Codecs |
CVE-2021-0519 |
|
Media Codecs, Media Framework components |
CVE-2021-0584 |
|
CVE |
Severity |
Component |
|
Kernel components |
||
|
CVE-2020-14381 |
High |
Futex |
|
CVE-2021-3347 |
High |
Futex |
|
CVE-2021-28375 |
High |
FastRPC |
|
MediaTek components |
||
|
CVE-2021-0573 |
High |
asf extractor |
|
CVE-2021-0574 |
High |
asf extractor |
|
CVE-2021-0576 |
High |
flv extractor |
|
CVE-2021-0578 |
High |
wifi driver |
|
CVE-2021-0579 |
High |
wifi driver |
|
CVE-2021-0580 |
High |
wifi driver |
|
CVE-2021-0581 |
High |
wifi driver |
|
CVE-2021-0582 |
High |
wifi driver |
|
Widevine DRM |
||
|
CVE-2021-0639 |
High |
Widevine |
|
Qualcomm components |
||
|
CVE-2021-1972 |
Critical |
WLAN |
|
CVE-2021-1976 |
Critical |
WLAN |
|
CVE-2021-1904 |
High |
Kernel |
|
CVE-2021-1939 |
High |
Display |
|
CVE-2021-1947 |
High |
Display |
|
CVE-2021-1978 |
High |
WLAN |
|
Qualcomm closed-source components |
||
|
CVE-2021-1916 |
Critical |
Closed-source component |
|
CVE-2021-1919 |
Critical |
Closed-source component |
|
CVE-2021-1920 |
Critical |
Closed-source component |
|
CVE-2021-1914 |
High |
Closed-source component |
|
CVE-2021-30260 |
High |
Closed-source component |
|
CVE-2021-30261 |
High |
Closed-source component |