37 Vulnerabilities Patched In Android With November 2023 Security Updates
On Monday, Google announced fixes for 37 vulnerabilities as part of the November 2023 Android Security Update, with additional fixes released for Pixel devices.
The first batch of security updates will affect devices with security platform level 2023-11-01 , which fixes 15 vulnerabilities in the Android framework and system components.
“The most serious issue is a critical security vulnerability in a system component that could lead to local information disclosure without requiring additional enforceable rights,” Google said in its advisory.
This bug, reported as CVE-2023-40113, affects Android versions 11, 12, 12L, and 13 and has been fixed along with six other system component issues classified as "high severity."
In fact, the remaining 14 vulnerabilities that were fixed with security patch level 2023-11-01 are high severity bugs. This can lead to privilege escalation, information disclosure, and denial of service.
The second part of the November 2023 Android security update arrives on devices with security platform level 2023-11-05 and fixes 22 security vulnerabilities in Arm, MediaTek and Qualcomm components.
Devices using security patch level 2023-10-05 contain fixes for all issues described in Android security bulletins from November 2023 and earlier.
Additionally, Google announced updates to major versions of Android 11 to 13.
This week, the internet giant also announced the patching of eight vulnerabilities in Pixel devices, including three vulnerabilities affecting core and WLAN components, as well as five vulnerabilities in Qualcomm components.
On Pixel devices, the 1/11/2023 security patch or later addresses these seven flaws, as well as any bugs fixed by the November 2023 Android Security Update.
While no separate patches have been released for Wear OS and Automotive OS this month, the updates released this week cover all bugs fixed with Android security patch levels of 10/05/2023 or version later.
Google has not identified any vulnerabilities used in the malicious attacks.
Related: October 2023 Android Security Update Patch: Two Exploitable Vulnerabilities
Related: Android Zero-Day Fixed in September 2023 Security Update
Related: 40 Vulnerabilities Fixed in Android with August 2023 Security Update
