Google has released an Android security patch for January 2020 and an update to the Pixel to fix the latest security vulnerabilities and provide improvements in stability and performance. This month’s update includes two security levels, 2020-01-01 and 2020-01-05, with a total of 40 fixes to Qualcomm components including Android frameworks, systems, media frameworks, kernel components, and closed-source content.
The most serious problem fixed in the January 2020 Android security patch is a vulnerability in the Android framework that allows local malicious programs to gain additional access, resulting in the disclosure of remote information in Android. It also fixes a critical vulnerability in the media framework that allows a remote attacker to use special files to execute malicious code.
“The most serious of these issues is a critical security vulnerability in the Media framework, where a remote attacker could use a specially crafted file to execute arbitrary code in a privileged process scenario,” the security bulletin read. The severity assessment of the vulnerability is based on the extent of the impact on the affected device. “
Google also released a Pixel update for January 2020, fixing 37 vulnerabilities for kernels and Qualcomm components. The most serious vulnerability addressed in this update could allow neighboring attackers to execute arbitrary code in privileged process scenarios by using specially crafted files.
This month’s Pixel update also fixes notification display issues in the UI, possible WiFi crashes in some corporate ApMs, and device jams during Android 10 startup. This update is available for the Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL, Pixel 3a, Pixel 3a XL, Pixel 4 and Pixel 4 XL.
Google has also fixed the NGA/cod switching feature and color-deflecting issues at lower brightness. Smooth Display has been added to the WeChat apps for the Pixel 4 and Pixel 4 XL, which fixes WiFi connectivity issues for Pixel 2 and Pixel 2 XL users, improved call speaker quality for the Pixel 3 and Pixel 3 XL, and improved audio capture in Pixel 3a and Pixel 3a XL videos.