Android Security Bulletin—July 2017 Update for Google Devices
As part of every month security update release, Google has release the latest Android security update for its Nexus and Pixel Devices on 5th of July this month. Google has already notify its partners about these issues in its bulletin month before the release. Now they will release the source code patches into AOSP repository within 48 hours. Along with the security patch OTA files users can also download the system images for compatible devices.
One of the most critical security vulnerability among them is in a media framework that could enable a remote attacker. Though Google also said in its bulleting that they had no reports of active customer exploitation or abuse of these newly reported issues.
To provide Android partners with the flexibility to more quickly fix a subset of vulnerabilities, Google has announce two security patch level strings, Partial and complete security patch.
Below is the table contains list of Google devices receiving the security patch level update in the latest over-the-air update (OTA) and firmware images.
Google device Security patch level
Pixel / Pixel XL July 05, 2017
Nexus 5X July 05, 2017
Nexus 6 July 05, 2017
Nexus 6P July 05, 2017
Nexus 9 July 05, 2017
Nexus Player July 05, 2017
Pixel C July 05, 2017
you can check the complete list of Google devices receiving updates on price comparison website.
Notes from Google security bulletin
Notes from Google security bulletin for the month of July, “The most severe of these issues is a critical security vulnerability in media framework that could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process. The severity assessment is based on the effect that exploiting the vulnerability would possibly have on an affected device, assuming the platform and service mitigation are turned off for development purposes or if successfully bypassed,”.