Google introduced on Tuesday the primary Android safety updates for 2023, which patch a complete of 60 vulnerabilities.
The primary a part of the replace, which arrives on gadgets because the 2023-01-01 safety patch degree, addresses 19 safety defects within the Framework and System parts.
“The most severe of these issues is a high security vulnerability in the Framework component that could lead to local escalation of privilege with no additional execution privileges needed,” Google notes in its advisory.
A complete of 11 elevation of privilege bugs had been resolved within the Framework part this month, together with three denial-of-service (DoS) points. 5 different elevation of privilege vulnerabilities had been addressed within the System part.
The second a part of this month’s safety replace, which arrives on gadgets because the 2023-01-05 safety patch degree, addresses 41 vulnerabilities in Kernel and third-party parts.
An important of those vulnerabilities are 4 critical-severity flaws in Kernel and Kernel parts, all resulting in distant code execution (RCE). Two high-severity elevation of privilege bugs had been additionally addressed in Kernel and Kernel parts.
The 2023-01-05 safety patch degree additionally fixes vulnerabilities in Kernel LTS (1 bug), Creativeness Applied sciences parts (1), MediaTek parts (3), Unisoc parts (13), Qualcomm parts (2), and Qualcomm closed-source parts (15).
A safety patch degree of 2023-01-05 addresses all points resolved with this and former Android safety updates.
This month, Google resolved eight extra vulnerabilities in Pixel devices, together with three high-severity Pixel flaws and 5 medium-severity points in Qualcomm parts.
Google additionally introduced patches for eight vulnerabilities as a part of the January 2023 security updates for Android Automotive, together with three necessary points within the Media Framework and Platform Apps parts, and 5 elective bugs in Platform Apps, System UI, and Kernel parts.