Google has released their December 2017 security update for Android devices. This comes on the heels of Google releasing the Android 8.1 Oreo update for Pixel devices. For November the update included some functional additions for Pixel 2 XL owners as well as fixes for some display issues. The December is much narrower focusing on security issues only.
According to Google, the main issue the December update addresses is a critical vulnerability in the Media framework. Google says remote attackers could use the vulnerability to execute code with a privileged access level. Another potential issue rated as critical existed in the system framework for Bluetooth and could open victim up to have code executed on their device if an attacker was nearby.
Several other issues were addressed in the update to tackle problem with the kernel and some more specific issues tied to vendor hardware like NVIDA, Qualcomm or MediaTek components.
The update will be released to the AOSP soon, if not already there. While device owners may have to wait for their manufacturers to push out an update for their device, they may get some comfort in knowing no instances of the exploits being used in the wild have been received.
source: Google
