Android Security Update – May 2018

On May 7, 2018 Google released an Android Security Bulletin containing details of security vulnerabilities affecting Android devices. Android security updates normally include two parts: general updates that affect most users and the updates affecting specific partners, such as hardware partners like NVIDIA, Broadcom and Qualcomm. Here we’ve summarized the general security updates on the Android Security bulletin from Security Patch level 2018-05-01.

• 5 Privilege Escalation Vulnerabilities: These types of vulnerabilities allow unprivileged processes, such as from third-party apps, to escalate privileges to the system level, bypassing the sandbox restrictions. All are rated as high impact. They are found in the media framework, the Android framework and system libraries.
• 1 Denial of Service Vulnerabilities: This vulnerability disables the users’ ability to use the phone or access certain services. It is considered high impact and found in the Android media framework.
• 1 Information Disclosure Vulnerability: These vulnerabilities allow malicious apps to access user data. They are rated as high impact and are found in the Android run-time libraries.

Appthority urges users to update their Android devices to the latest OS version which includes these security updates. We also recommend enterprise IT admins set strong policies against keeping outdated OS versions on their employees’ mobile devices.

*** This is a Security Bloggers Network syndicated blog from Mobile Threat Blog Posts | Appthority authored by Su Mon Kywe. Read the original post at: https://www.appthority.com/mobile-threat-center/blog/android-security-update-may-2018/