Google has released the February 2022 Android security updates, addressing two critical vulnerabilities, one being a remote escalation of privilege that requires no user interaction.
The vulnerability is tracked as CVE-2021-39675, carrying a “critical” severity rating, and affects only Android 12, the latest version of the popular OS.
Also Read: What Is Data Sovereignty and How Does It Apply To Your Business?
These flaws are typically leveraged by sophisticated spyware vendors that independently discover and privately use zero-days in mobile operating systems. However, in this case, Google hasn’t seen any signs of active exploitation.
The second critical flaw addressed by the February 2022 security update is CVE-2021-30317, which affects a closed-source component of Qualcomm, and thus only concerns Android devices that use that vendor’s hardware.
Here’s a summary of this month’s fixes:
As Google clarifies in the bulletin: “The severity assessment is based on the effect that exploiting the vulnerability would possibly have on an affected device, assuming the platform and service mitigations are turned off for development purposes or if successfully bypassed.”
The technical details about the vulnerabilities are not available at this time, as Android updates typically need several months to reach a respectable percentage of the userbase, given that vendors need to bundle them separately for each device model.
Also Read: What Vulnerability Assessment Shows and How It Can Save You Money
The only exception to this practice is Google’s own Pixel devices, with all models from ‘3a’ up to ‘6 Pro’ already receiving the February 2022 security update in a simultaneous roll-out.
Finally, the fixes that come with this month’s update concern Android 10, 11, and 12, so if your phone runs anything older than that, you are no longer covered, and you should consider your device a security liability.
If you don’t want to replace a perfectly working electronic device that is no longer supported by its manufacturer, you could flash it with a third-party Android ROM that’s based on a more recent and secure AOSP version, like LineageOS for example.
The Fundamental Role of Password Security that every Organisation in Singapore should know. Strengthening Cybersecurity:…
The Importance of Security Testing that every Organisation in Singapore should know. Prioritizing Website Security:…
Role of Enhanced Access Controls in Safeguarding Personal Data in Telecommunications that every Organisation in…
Effective Incident Response Procedures in Strengthening Data Security that every Organisation in Singapore should know…
Crucial Role of Regular Vulnerability Scanning that every Organisation in Singapore should know. Strengthening Your…
Enhancing Data Security with Multi-Factor Authentication that every Organisation in Singapore should know. Enhancing Data…
This website uses cookies.