Ahead of Google I/O, where the company is most likely to officially announce Android Q, Google has rolled out the May security patches for Android and Pixel devices. In the Pixel bulletin, the company posts that there are no functional updates for the Pixel phones this month. The Android bulletin says that the latest patch has resolved a total of 10 issues across Framework, Media Framework and System components.
The vulnerabilities range from high to critical, with the most severe relating to the media framework and a remote attacker possibly executing arbitrary code through a crafted file. According to Google, there were “no reports of active customer exploitation or abuse of these newly reported issues.” Apart from Pixel devices, Essential Phones have also got the update with improvements to Bluetooth and shutdown responsiveness.
https://twitter.com/essential/status/1125460476287168512?ref_src=twsrc%5Etfw
Last month, Google released its Android Security and Privacy 2018 Year In Review report, which claimed that the overall health of Android ecosystem improved as compared to last year. The company's report claimed that in the fourth quarter of 2018, 84 percent more devices received a security update as compared to the devices in the same quarter last year.
Google also said that the devices that had apps installed from outside of Google Play were affected by PHAs eight times more often. Compared to the previous year, even those devices saw a 15 percent reduction in malware.