The month of August has just begun and the first day of the month is joyful for the Google Pixel owners, the very first day, Google rolled out the current month’s patch – the August 2022 security patch update for its Pixel devices. As usual, the rollout of the Pixel smartphones begins immediately after the announcement, so the first security gaps are patched, problems are fixed and possible new features are brought to the devices in these minutes. In addition, users of Pixel smartphones can look forward to a separate update again.
Many bugs and security vulnerabilities were reported in Android for the month of August, with the same components being the focus of the problems or bugs found and allowing arbitrary code to be executed every month – an all-time classic. But even in the eighth month of 2022, there are a number of other plugged gaps in the system component and the Qualcomm components. In total, the developers only discovered and patched one critical and 35 medium vulnerabilities this month.
In most cases, Google only publishes the details of the security gaps and bugs after the update has been rolled out, so that they could not be exploited in the past, which, as usual, was proud to be reported this month.
The most severe of these issues is a critical vulnerability in the Media Framework component that could allow a remote attacker to use a specially crafted file to run arbitrary code in the context of a privileged process. The severity rating is based on the impact that exploiting the vulnerability would potentially have on an affected device, assuming the platform and service mitigations are disabled for development purposes or if bypassed successfully.
We have had no reports of active customer exploitation or abuse of these newly reported issues. Refer to the Android and Google Play Protect mitigations section for details on the Android security platform protections and Google Play Protect, which improve the security of the Android platform.
Update for pixel smartphones
This month, users of Pixel smartphones can “only” look forward to bug fixes and patched security gaps, at least for the first time. This suggests that another major update is yet to come – and that is likely in the form of Android 13. The new operating system is expected to be released in the next few days.
If you don’t want to wait for the update via OTA, you can download both the factory and OTA images for the Pixel smartphones directly from Google. Details on all gaps can be found directly under the following links, in which the individual problems with the components are listed and explained in detail.
| CVE | References | Type | Severity | Updated AOSP versions |
|---|---|---|---|---|
| CVE-2021-39696 | A-185810717 | EoP | High | 10, 11, 12 |
| CVE-2022-20344 | A-232541124 | EoP | High | 10, 11, 12, 12L |
| CVE-2022-20348 | A-228315529 | EoP | High | 10, 11, 12, 12L |
| CVE-2022-20349 | A-228315522 | EoP | High | 10, 11, 12, 12L |
| CVE-2022-20356 | A-215003903 | EoP | High | 11, 12, 12L |
| CVE-2022-20350 | A-228178437 | ID | High | 10, 11, 12, 12L |
| CVE-2022-20352 | A-222473855 | ID | High | 12, 12L |
| CVE-2022-20357 | A-214999987 | ID | High | 12, 12L |
| CVE-2022-20358 | A-203229608 | ID | High | 10, 11, 12, 12L |
If you like our news and you want to be the first to get notifications of the latest news, then follow us on Twitter and Facebook page and join our Telegram channel. Also, you can follow us on Google News for regular updates.