Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Mobile & Wireless

37 Vulnerabilities Patched in Android

Android’s June 2024 security update resolves 37 vulnerabilities, including high-severity flaws in Framework and System.

Android security updates

Google this week started rolling out the June 2024 set of monthly security updates for Android, with patches for 37 vulnerabilities, including multiple high-severity elevation of privilege bugs.

The first part of this month’s security update, which arrives on devices as the 2024-06-01 security patch level, resolves 19 flaws in the Framework and System components.

“The most severe of these issues is a high security vulnerability in the System component that could lead to local escalation of privilege with no additional execution privileges needed,” Google notes in its advisory.

A total of seven security defects were addressed in the System component this month, all leading to elevation of privilege. Of the 12 issues resolved in Framework, ten are elevation of privilege bugs, one leads to information disclosure, and one to denial of service.

The second part of the update arrives on devices as the 2024-06-05 security patch level and addresses an additional 18 vulnerabilities in Kernel, Imagination Technologies, and Arm, MediaTek, and Qualcomm components. Three of the Qualcomm-specific flaws are critical.

Devices running a security patch level of 2024-06-05 contain fixes for all these bugs, as well as for security defects addressed with previous patch levels.

Advertisement. Scroll to continue reading.

This week, Google also announced patches for three other vulnerabilities in the Framework and System components of Wear OS. The Wear OS update also includes all the fixes delivered with the Android 2024-06-05 security patch level.

The June 2024 Android Automotive OS (AAOS) security bulletin, on the other hand, contains no new AAOS patches, but the AAOS update contains Android’s 2024-06-05 security patch level fixes.

No June 2024 security bulletins have been published for Pixel and Pixel Watch devices yet.

Google makes no mention of any of the vulnerabilities addressed with this month’s security updates being exploited in the wild. Users are advised to update their devices as soon as possible.

Related: Android 15 Brings Improved Fraud and Malware Protections

Related: Unwanted Tracking Alerts Rolling Out to iOS, Android

Related: Android Update Patches Critical Vulnerability

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

Stephen Garcia has been named Chief Information Security Officer at BreachRx.

Kasper Lindgaard has been appointed Vice President of Security Strategy at CoreView.

Chaim Mazal has been named Chief Information Security Officer at GitLab.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.