It’s a bumper month for Android security patches, so be sure to update your phone as soon as possible.
The December Android security update is out and you don’t want to skip this one. It fixes no less than 81 vulnerabilities, four of which are classified as critical.
Google says the most serious flaw could allow remote code execution over Bluetooth without any device permissions. Some bugs affect devices running versions as old as Android 10.
The December security update
Google does not describe the exact nature of the vulnerabilities to ensure that hackers do not exploit them before users have had a chance to install the available update or, in fact, target devices that are no longer updated. day.
But out of the four critical bugs, two are in the system component. from google Security Bulletin says the most serious of these “could lead to remote code execution over Bluetooth without requiring additional execution privileges.” The other two are in the Framework, and could also allow remote code execution. Some of the other high-severity bugs could lead to a local data leak.
All manufacturers receive details of issues a month in advance, so they will all be fixed in their December security patches. Critical flaws are listed as affecting Android 10 through Android 13, so there are plenty of vulnerable devices and it’s important to keep them updated.
Google also highlighted the steps it has taken to make Android more secure, saying that exploitation is “made more difficult by improvements in newer versions of the Android platform.” The company also highlighted Google Play Protect’s role in detecting dangerous apps, noting that it’s especially important for users who download apps outside of the Play Store.
Most Android phones should prompt you to install updates as they become available. You can check which security update your phone is running, though where you’ll find this information depends on the device you’re using. If you go to Settings and search for “Security”, this should lead you to the information you need.
Keep your phone up to date
The higher-than-usual number of fixes in the December update, and the severity of some of them, is a timely reminder of the importance of keeping your phone up to date. This is also something you need to consider when buying a new device. The likes of Samsung, Google and now OnePlus all offer security updates for five years from release date.
