Google fixes over 100 flaws in Android, many in chipset drivers

Google released a new batch of Android patches on Wednesday, fixing more than 100 flaws in Android's own components and in chipset-specific drivers from different manufacturers.

Android's media server component, which handles the processing of video and audio streams and has been a source of many vulnerabilities in the past, is at the forefront of this security update. It accounts for 16 Android vulnerabilities, including seven critical flaws that can allow an attacker to execute code with higher privileges. 

The bugs can be exploited by sending specifically crafted audio or video files to users' devices via the browser, email or messaging apps. Because of the repeated media server flaws, Google Hangouts and the default Android Messenger applications no longer pass media to this component automatically.

To read this article in full or to leave a comment, please click here