Google Android Family April 2024 Routine Security Update Advisory

Overview

 

Google(https://www.google.com) has released a security update that fixes vulnerabilities in the Android family of products. users of affected products are advised to update to the latest version.

 

Affected Products

 

Android Framework

Android System

Android MediaTek Components

Android Qualcomm Components

 

Resolved Vulnerabilities

 

Highly-rated local privilege escalation vulnerabilities in the Android framework (CVE-2024-23710, CVE-2024-23713, CVE-2024-0022, CVE-2024-23712) [2]

Highly-rated local privilege escalation vulnerabilities in Android systems (CVE-2024-23704, CVE-2023-21267, CVE-2024-0026, CVE-2024-0027) [2]

Highly-rated denial-of-service vulnerability in Android systems (CVE-2024-0027) [2]

Highly-rated vulnerabilities in Android MediaTek (Widevine DRM) components (CVE-2024-0042, CVE-2024-20039, CVE-2024-20040, CVE-2023-32890) [2]

Highly-rated vulnerabilities in Android Qualcomm (Closed-source component) components (CVE-2023-28582, CVE-2023-28547, CVE-2023-33023, CVE-2023-33084, CVE-2023-33086, Cve-2023-33095, cve-2023-33096, cve-2023-33099, cve-2023-33100, cve-2023-33101, cve-2023-33103, cve-2023-33104, cve-2023-33115, cve-2024-21463, cve-2024-21468, cve-2024-21472) [2]

 

Vulnerability Patches

 

Product-specific Vulnerability Patches were made available in the April 5, 2024 update. For more information on Vulnerability Patches, please refer to the Referenced Sites document. [3]

 

Referenced Sites

 

[1] Android Security Bulletins

https://source.android.com/docs/security/bulletin/asb-overview

[2] Android Security Bulletin-April 2024

https://source.android.com/docs/security/bulletin/2024-04-01.html

[3] Check & update your Android version

https://support.google.com/android/answer/7680439