The December Security Patch for Android Fixes Critical Bluetooth Bug, and 80 More!

December’s Android Security update is out and you don’t want to skip this one. It fixes no fewer than 81 vulnerabilities, of which four are described as critical.

Google says that the most severe flaw could allow the remote execution of code over Bluetooth without any device permissions. Some of the bugs affect devices running versions as old as Android 10.

4

The December Security Update

Google doesn’t describe the exact nature of the vulnerabilities to ensure that hackers don’t get to exploit them before users have had the chance to install the available update—or, indeed, target devices that no longer get updated.

But of the four critical bugs, two are in the System component. Google’sSecurity Bulletinsays the most serious of those “could lead to remote code execution over Bluetooth with no additional execution privileges needed.” The other two are in the Framework, and could also enable the remote execution of code. Some of the other bugs with high severity could lead to the local leaking of data.

phone security

All manufacturers receive details of the issues a month in advance, so they will all be fixed in their December security patches. The critical flaws are listed as affecting Android 10 to Android 13, so there are a lot of vulnerable devices around, and it’s important to keep them up to date.

Google has also emphasized the steps it has taken to make Android more secure, saying that exploitation is “made more difficult by enhancements in newer versions of the Android platform.” The company also highlighted the role of Google Play Protect in detecting dangerous apps, stressing that it is especially important forusers who sideload appsfrom outside the Play Store.

google security bulletin

Most Android phones should prompt you to install updates as soon as they become available. You can check which security update your phone is running, although the place you’ll find this information depends on what device you’re using. If you go toSettingsand search for “Security”, that should lead you to the info you need.

Keep Your Phone Up to Date

The higher-than-usual number of fixes in the December update, and the severity of some of them, is a timely reminder of the importance of keeping your phone up to date. It’s also something you should factor in when buying a new device. The likes of Samsung, Google, and now OnePlus all offer security updates for five years from the date of release.

If long-term software support is your top priority, your options are limited.

A Google Pixel next to a Samsung Galaxy, with an Android update image above the devices.

These plugins will make you wonder why you used Photoshop in the first place.

Now, I actually finish the books I start.

GIMP website on a monitor.

Don’t let aging hardware force you into buying expensive upgrades.

Revolutionize your driving experience with these game-changing CarPlay additions.

My foolproof plan is to use Windows 10 until 2030, with the latest security updates.

Technology Explained

PC & Mobile