Comment: Android users, update ASAP to avoid actively exploited vulnerabilities

“The latest February Android updates from Google patch 48 security flaws, including a high-severity Linux Kernel flaw in its USB Video Class driver.

This particular zero-day flaw - CVE-2024-53104 – could allow “physical escalation of privilege with no additional execution privileges needed”, according to Google, or in other words: gain control of an unpatched device under the right conditions. Google has said the vulnerability may already be exploited in a limited number of cases.

Another major fix addresses CVE-2024-45569, a critical Qualcomm wireless LAN vulnerability with a near-maximum severity score (CVSS 9.8/10). This one could allow remote code execution, memory manipulation, or even device crashes.

With 46 other high-severity bugs also patched in the update, the message is clear: update your Android device ASAP to stay protected.”