Two Important Vulnerabilities Detected in the Latest Android Update

Google has revealed two major security vulnerabilities in the latest monthly Android update. These vulnerabilities; Android devices, remotely code operating It makes you vulnerable to an attack called: Two vulnerabilities called CVE-2020-0117 and CVE-2020-8597, Android System It is included in the section. 

Using the mentioned vulnerabilities, attackers can remotely execute arbitrary codes using a specially designed post. These deficits From Android 8 to Android 10 It is stated that it affects versions up to . These vulnerabilities occur while processing e-mail, web browsing and media files. MMS by It is stated that it can be used.

Attackers; can access, change or delete your data:

Any attacker, depending on the privileges associated with the application; can install applications, change or delete data. Attackers also have full user permissions new accounts can create. The other two vulnerabilities affecting the System (CVE-2020-0116 and CVE-2020-0119) are high severity information disclosure issues affecting Android 10. Google provides technical details about these vulnerabilities. didn't give.

It is stated that the high-severity vulnerabilities pointed out by the June security updates have also been seen in other parts, including the Android Framework. Among these, there is one in Android 10. 'Elevation of Privilege' (EoP) There is a vulnerability (CVE-2020-0114). This vulnerability allows a local malicious application to bypass user interaction requirements to gain access to additional permissions. 

In addition, Google informed about another EoP vulnerability called CVE-2020-0115, which affects Android 8 to Android 10, and the vulnerability called CVE-2020-0121, which affects Android 10. Android Media Framework Two exploits (CVE-2020-0118 and CVE-2020-0113) have been released for . 

Finally, three high-severity vulnerabilities were detected in Android's core components. Used by Android devices as well as Android Qualcomm also in chips two important and a vulnerability was found that allows remote exploitation. Both vulnerabilities were detected in the modem section of Qualcomm's mobile chips.