Updated
Updated · Malwarebytes Labs · Oct 7
Google Patches 7 Critical Android Flaws in Versions 14-17 as Older Devices Lag
Updated
Updated · Malwarebytes Labs · Oct 7

Google Patches 7 Critical Android Flaws in Versions 14-17 as Older Devices Lag

3 articles · Updated · Malwarebytes Labs · Oct 7

Summary

  • Google’s October Android bulletin delivers fixes for versions 14, 15, 16, 16-qpr2 and 17, closing several critical bugs that can be exploited without any user action.
  • The update package patches 25 vulnerabilities in total, including seven critical flaws across Framework and System components; the most severe can enable local privilege escalation, with no in-the-wild abuse reported.
  • Many users will not get the fixes quickly because vendors must test and adapt patches, and some devices — including certain Samsung Galaxy S22 and Galaxy A models — receive security updates only quarterly.
  • Roughly 4 in 10 Android devices were still running Android 12 or earlier in last year’s distribution figures, leaving a large share of the ecosystem outside these October patches and extending the window for attackers.

Insights

How will the new automotive design tokens secretly shift the balance of branding power between Google and car manufacturers?
Why is Google quietly forcing developers to migrate their payment APIs before the end of 2026?
Could the new India-exclusive AI image labels in the Play Store trigger a global shift in digital content regulation?