This week Google has announced the release of security patches for 39 vulnerabilities for the March 2022 security update for Android devices.
The most sensitive vulnerability is CVE-2021-39708 which gives a remotely exploitable elevation of privilege to malicious actors. This issue was found in the System component.
“The most severe of these issues is a critical security vulnerability in the System component that could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation,” Google notes in its advisory.
The first set of measures arrives on devices as the 2022-03-01 security patch level and addresses CVE-2021-39708 with 17 other bugs.
According to the data, 10 security issues have been resolved in the System component in which nine issues were elevation of privilege and one was information disclosure vulnerability. Also, six vulnerabilities were resolved in Framework in which four were elevation of privilege and two denials of service bugs.
Further, one security measure was patched in Android runtime (elevation of privilege) and the last was in Media Framework (information disclosure).
Additionally, On Google Pixel devices, the March 2022 Android security measures also have resolved 21 flaws as part of the 2022-03-05 security patch level. Later addresses all of these vulnerabilities along with 41 other security flaws that hit Kernel components (13 flaws), Pixel (26), Qualcomm components (1), and Qualcomm closed-source components (1).
The March 2022 security measures with patch level 2022-03-05 are released for the Pixel 3a series, Pixel 4 series, Pixel 4a series, Pixel 5, Pixel 5a, however, the Pixel 6 series update is delayed (again). Additionally, the Pixel-specific new measures introduced additional vulnerabilities in the Pixel software, kernel, and both open and closed-source Qualcomm components, the details of which have been given below.
Global: Pixel 3a: SP2A.220305.012
Pixel 3a (XL): SP2A.220305.012
Pixel 4: SP2A.220305.012
Pixel 4 (XL): SP2A.220305.012
Pixel 4a: SP2A.220305.012
Pixel 4a (5G): SP2A.220305.012
Pixel 5: SP2A.220305.012
Pixel 5a (5G): SP2A.220305.012
Pixel 6: Waiting Pixel 6 Pro: delayed.
