This week, Google announced the March 2023 security updates for its Android platform, which addressed more than 50 vulnerabilities. The most severe of these are two remote code execution (RCE) flaws found in the System component, both of which were resolved with the 2023-03-01 security patch level. Additionally, 18 bugs were addressed in the System component and eight in the Framework component, both of which are rated ‘high’ severity.
The second part of the March 2023 Android updates, which arrived on devices as the 2023-03-05 security patch level, addressed an additional 29 vulnerabilities. These impacted the Android Kernel, MediaTek, Unisoc, Qualcomm, and Qualcomm closed-source components, and most are rated ‘high’ severity, with two ‘critical’. No Android Automotive OS security patches were released this month, and no mention of Pixel phone updates was made.
Overall, Google’s March 2023 security updates for Android are comprehensive, addressing a total of 81 vulnerabilities spread across the System and Framework components, as well as the Android Kernel, MediaTek, Unisoc, Qualcomm, and Qualcomm closed-source components. While the majority of these were rated ‘high’ severity, two were classified as ‘critical’. Unfortunately, no updates were released for Android Automotive OS or Pixel phones this month.
Key Points:
• Google’s March 2023 security updates for Android addresses 81 vulnerabilities.
• The most severe of these are two remote code execution (RCE) flaws found in the System component.
• 18 bugs were addressed in the System component and eight in the Framework component, both of which are rated ‘high’ severity.
• The second part of the March 2023 Android updates addressed an additional 29 vulnerabilities impacting the Android Kernel, MediaTek, Unisoc, Qualcomm, and Qualcomm closed-source components.
• No Android Automotive OS security patches were released this month, and no mention of Pixel phone updates was made.