February Android and Pixel Security Bulletins are Live with Factory Images and OTAs
Google kicks off the beginning of every month with an Android Security Bulletin, the newest of which went live Monday alongside patches for Pixel and Nexus devices. It’s accompanied by a list of exploits addressed, and factory images and over-the-air update files for the Pixel 2 XL, Pixel 2, Pixel XL, Pixel, Pixel C, Nexus 6P, and Nexus 5X.
The February Android Security Bulletin fixes a vulnerability in Android’s Media framework that enables remote attackers to execute code in a privileged process. Google hasn’t received reports of it being used, but the search giant labeled it “critical”, meaning that bad actors with knowledge of the bug could use it to render devices inoperable, get around user interaction requirements to install packages, or bypass Android’s Secure Boot.
Monday’s security patch (date 2018-02-05) fixes 7 security issues altogether, and it’s the second released this month — the first (2018-02-01) resolved 19 bugs. (Google offers two security patch levels to afford Android OEMs some flexibility in updating their devices.) The severity of the issues range from moderate to high, and include elevation of privilege, information disclosure, denial of service, and remote code execution exploits.
The February security patch for Google Nexus and Pixel devices addresses 29 vulnerabilities and a number of bugs. Bluetooth headset call quality has been enhanced on Pixel devices. And on the Pixel 2 and Pixel 2 XL, Wi-Fi uplink performance, camera performance in certain light conditions, and Android Auto Projected performance have been improved.
The February patch also activates the Pixel 2 and Pixel 2 XL’s Pixel Visual Core co-processor, which accelerates image processing in first- and third-party camera apps. Google says both phones should exhibit better routing when switching between audio outputs and “improved stability” after booting in certain situations, too.
Finally, the February patch improves battery performance on some Pixel 2 XL devices.
Both the Android Security Bulletin and the Pixel/Nexus security patches are rolling out now. To check if your phone or tablet’s up to date, head to the Settings menu, tap System > About phone (or About tablet), and scroll down to “Android security patch level”. Alternatively, head to the source link and download the latest factory image for your device.