Google reveals new critical flaw in Android; see details

Google has officially announced that a serious new security vulnerability has been discovered in Android. The breach in the operating system was confirmed in the December 2023 issue of Android Security Bulletin.

According to Google, the severity of the CVE-2023-40088 breach is considered “critical” due to the high risk of device intrusion. it includes Bluetooth connection processes that can be blocked by malicious users.

If this vulnerability is exploited, it will allow the attacker to perform an action. “remote (near/adjacent) code execution without needing additional execution privileges” or consent of the victim.

However, Google considers it difficult to exploit this flaw. For this to happen, the criminal must be physically close to the target. hack involves short-range wireless connections — such as Wi-Fi, Bluetooth or NFC.

Android bug fixing in progress

According to the Google report, Android partner manufacturers were informed about this flaw in advance.

The security update that fixes the CVE-2023-40088 bug for Android 11, 12, 12L 13 and 14 versions has already been approved by the company.

The fix will be released by the Android Open Source Project (AOSP) repository as of this Wednesday (6), but its implementation depends on the device manufacturers submitting the fix. This means that It may take a few days for the patch to ship.

It is also worth remembering that this is not the only critical bug that Google has detected in one of its services in recent days. The Chrome browser also had to undergo an urgent security update due to a critical flaw.

If you have an Android device stay tuned for security updates will appear in notifications in the next few days and install now. Until now, Google has not confirmed whether the flaw was exploited in a criminal way.