Home
News
You are here

To patch a dangerous flaw, Pixel users need to install the November security update ASAP

0comments

By Alan Friedman

Published: Nov 09, 2024, 2:49 PM

PhoneArena's Vic is holding a Pixel 9 Pro up to the camera showing off the camera bar on the rear.

With the release of the November Android security update earlier this month, Google let us know that two vulnerabilities were in the process of being actively exploited. To be precise, Google said that two of the flaws fixed in the update "may be under limited, targeted exploitation." One of the flaws, CVE-2024-43047, is a dangerous flaw impacting certain Qualcomm Snapdragon chipsets. This flaw resulted in a warning from the U.S. government.

On October 8th, Uncle Sam told Android device users working for the government to update their handsets by October 29th or they must stop using their devices. Qualcomm says that it not only sent phone manufacturers the fixes to patch up these vulnerabilities in September, but it told these companies to deploy these patches on released phones as soon as possible. Attackers could obtain arbitrary code with kernel privileges, granting them full control over the affected device.

While Pixel users can install their November security update and receive the patch, the fix will not be found on the November security update for Samsung phones. The patch will be available for a large number of Qualcomm chipsets that have the vulnerability. Flaws like this are the reason why device owners need to take security updates seriously and install them as soon as they are available.

List shows all of the Qualcomm Snapdragon chips affected by this vulnerability.

These are the Qualcomm chips affected by the dangerous CVE-2024-43047 vulnerability. | Image credit-Qualcomm

Sure, we'd rather get an update that includes new features and we know how boring a monthly security update can be. But considering what is at risk here, Pixel users should install the November security update right away while owners of Android devices made by Samsung should continue to download the security update each month as soon as they can. Eventually, the patch for CVE-2024-43047 will turn up in the security update for the Android phones released by Samsung.

And don't forget, Google's Threat Analysis Group said that CVE-2024-43047 is being exploited albeit on a limited basis. Pixel users, go to Settings > System > System update andfollow the directions to install the security update. Even though the patch isn't on the November security update for Samsung devices, you need to install it anyway. On Samsung phones go to Settings > Software update > Download and install.

$349

$799

$450 off (56%)

Mint Mobile now sells the Google Pixel 10 with a massive $450 discount. The promo is available on select color variants with 128GB of storage. You also get a 12-month unlimited data plan for $180 instead of $360.

Buy at Mint Mobile

$524

$999

$475 off (48%)

Grab the pro-grade, compact Pixel 10 Pro at Mint Mobile with a 12-month unlimited plan, and you can save a huge $475. The data plan comes with a discount, too: 50% off, to be exact.

Buy at Mint Mobile

$499

$1199

$700 off (58%)

The high-end Gemini AI-enhanced Pixel 10 Pro XL is now available with a mind-blowing discount. You can now save $700 on the phone, plus 50% off unlimited 12-month plans.

Buy at Mint Mobile

$1399

$1799

$400 off (22%)

The foldable Pixel 10 Pro Fold is another standout holiday offer. Right now, you can get the device for $400 off at Mint Mobile. On top of that, you save $180 on 12-month unlimited data plans.

Buy at Mint Mobile

View Full Bio

Alan, an ardent smartphone enthusiast and a veteran writer at PhoneArena since 2009, has witnessed and chronicled the transformative years of mobile technology. Owning iconic phones from the original iPhone to the iPhone 15 Pro Max, he has seen smartphones evolve into a global phenomenon. Beyond smartphones, Alan has covered the emergence of tablets, smartwatches, and smart speakers.

Read the latest from Alan Friedman