The most severe vulnerability was a media framework-related flaw that could potentially allow a remote attacker to execute an arbitrary code using a specially-crafted file. The update also fixes multiple issues within the Android runtime, framework and library.
Google is also patching system and kernel components to restrict access of local malicious apps. Furthermore, there are fixes for a number of security issues affecting various Qualcomm components. Google says that there are no reports of any real-world attacks that have been carried out by exploiting any of the 59 vulnerabilities.
It’s worth noting here that Essential Products, which rolled out Android Pie to its PH-1 smartphone almost simultaneously with Google last month, has also separately released the newest Android security update for the Essential PH-1.
The updates also include three functional patches not related to the security of the devices. According to Google, the update improves software version reporting and audio quality over car speakers on the four Pixel devices. Additionally, it improves battery charge in Retail Mode on the Pixel 2 and Pixel 2 XL.
Passionate techie. Professional tech writer. Proud geek.