LG's January security patch fixes several flaws and exploits exclusive to LG phones

LG's January security patch fixes several flaws and exploits exclusive to LG phones
LG is working diligently to bring its major Android devices up to date with Google's monthly security patches and fixes of its own. The company has published its January Security Bulletin, describing several vulnerabilities and exposures which have been addressed in its G (G3, G4, G4 Stylus, G Stylo, G5), V series (V10, V20), and CK series. Sadly, it seems the company's budget models (such as its X and K series) aren't privileged to this kind of support, but such are the wayward ways of Android device makers sometimes.

Regardless, the maintenance release contains fixes for eight vulnerabilities strictly related to LG phones. One is rated as critical, two are rated as high, four are moderate, and the last is low. The fixes will prevent an application that logs personal information to storage from being started without user consent, stop malicious apps from executing arbitrary code, close an exploit that leads to read/write access to kernel memory, and close off other vulnerabilities. LG describes the one critical vulnerability as "most severe," with its possibility of enabling remote code execution on an affected device through multiple methods such as email, web browsing, and MMS when processing media files.

The update is yet to go live, and in a sort of unprecedented move, LG's announcement actually precludes Google's official Android security bulletin for January 2017. We reckon the update will be released soon, with announcements by Google and other manufacturers such as Samsung going live as well.

ALSO READ

FEATURED VIDEO

2 Comments

1. Jackdaw

Posts: 66; Member since: Mar 10, 2016

Nice gesture LG!

2. Stirech

Posts: 1; Member since: Jan 03, 2017

Precludes = prevent from happening; make impossible. Is it possible 'preempt' was meant or more is appropriate, in it's place?

Latest Stories

This copy is for your personal, non-commercial use only. You can order presentation-ready copies for distribution to your colleagues, clients or customers at https://www.parsintl.com/phonearena or use the Reprints & Permissions tool that appears at the bottom of each web page. Visit https://www.parsintl.com/ for samples and additional information.