Critical Android Security Vulnerability Let Remote Attacker Cause Permanent Denial of Service

Critical Android Security Vulnerability Let Remote Attacker Cause Permanent Denial of Service

mci-pages-sharing
Critical Android Security Vulnerability Let Remote Attacker Cause Permanent Denial of Service

Google released security updates for Android that deploy fixes for 15 vulnerabilities with severity level critical, high and moderate and another 22 vulnerabilities patched Qualcomm components.

The source code for the issues to be released with the Android Open Source Project (AOSP) repository and Google said that "partners notified about the issue before a month."

These vulnerabilities cause a Denial of Service and an operating system update needs to be done as soon as possible.

The purpose of Denial of Service attacks is to disable services and sometimes to damage device resources.

Vulnerability Mitigation

The update for the patches depends upon the Android device manufacturer. The good news is that there are no current reports of these vulnerabilities exploited. Samsung said that it is " is releasing a maintenance release for major flagship models as part of the monthly Security Maintenance Release (SMR) process. This SMR package includes patches from Google and Samsung."

LG has rolled out patches for December 2019 security bulletin, covering three critical security vulnerabilities. Google said that "Google devices start receiving OTA updates on the same day the monthly bulletin is released. In general, it takes about one and a half calendar weeks for the OTA to reach every Google device."