Google has initiated the deployment of its June 2024 Android security updates, addressing a total of 37 vulnerabilities, including several high-severity elevation of privilege bugs. The initial part of the update, labeled as the 2024-06-01 security patch level, tackles 19 flaws primarily within the Framework and System components. Notably, seven of these issues pertain to the System component, posing potential risks of elevation of privilege.
Following this, the subsequent segment of the update, denoted as the 2024-06-05 security patch level, attends to an additional 18 vulnerabilities found in Kernel, Imagination Technologies, and components by Arm, MediaTek, and Qualcomm. Of particular concern are three critical flaws identified in Qualcomm-specific components. Devices updated to the latest patch level, 2024-06-05, receive comprehensive fixes for these vulnerabilities along with those addressed in earlier patch levels.
Furthermore, Google has announced patches for three additional vulnerabilities affecting the Framework and System components of Wear OS, with the Wear OS update incorporating all fixes from the Android 2024-06-05 security patch level. However, no new Android Automotive OS (AAOS) patches are included in the June 2024 security bulletin for AAOS, though the update integrates the security fixes from the Android 2024-06-05 patch level. Although Google hasn’t noted any active exploits for the addressed vulnerabilities, users are strongly advised to update their devices promptly to mitigate potential security risks.