If you’ve been keeping up with the Android Security Bulletin, you may have noticed a mention of two critical vulnerabilities in the November security patch level. These vulnerabilities, known as CVE-2024-43047 and CVE-2024-43093, are said to be under limited, targeted exploitation according to the bulletin.
The first vulnerability, CVE-2024-43047, involves memory corruption in the Qualcomm Digital Signal Processor (DSP) service, affecting various Qualcomm chipsets. This vulnerability could allow attackers to escalate privileges and compromise affected devices. Qualcomm released a patch for this vulnerability in October, which is now included in the November Android Security Update for wider distribution and remediation.
The second vulnerability, CVE-2024-43093, is an escalation of privilege issue affecting Android’s framework component in versions 12, 13, 14, and 15. This vulnerability could expose a significant portion of Android to attacks.
Google will be releasing two patch levels to address these vulnerabilities. The November 1 patch level will target core Android components, while the November 5 patch level will address issues with Qualcomm chipsets, as well as MediaTek, Imagination Technologies, and more. It’s important to note that your Android device will not be fully protected until the November 5 patch level is applied.
If you’re like me and using a Pixel 9 Pro running Android 15, you may still be on the October 5 patch level, leaving your device vulnerable. To check for updates on Android 15, go to Settings > System > “Software updates” and check your patch level. If it’s outdated, tap “System update” and then “Check for update.” Once the update is available, be sure to apply it promptly.
If you only receive the November 1 patch level, continue checking daily for the November 5 patch level and apply it as soon as possible. Neglecting to apply these patches will leave your device exposed to these critical vulnerabilities.
Remember, staying updated is crucial for your device’s security. Keep an eye out for the latest patches and apply them promptly to protect your Android device from potential threats. Stay safe and prioritize your device’s security by keeping up with updates.