Number: AV16-056
Date: 6 April 2016
Purpose
The purpose of this advisory is to bring attention to the Android Security Bulletin for April.
Assessment
The Android Security Bulleting addresses a security update for 39 vulnerabilities (15 Critical, 16 High, and 8 Moderate) that could potentially enable remote code execution on affected devices. This update is also distributed to the Android Open Source Project (AOSP) repository.
CVE References: CVE-2014-6060, CVE-2015-1805, CVE-2016-0834, CVE-2016-0835, CVE-2016-0836, CVE-2016-0837, CVE-2016-0838, CVE-2016-0839, CVE-2016-0840, CVE-2016-0841, CVE-2016-0842, CVE-2016-0843, CVE-2016-0844, CVE-2014-9322, CVE-2016-0846, CVE-2016-0847, CVE-2016-0848, CVE-2016-0849, CVE-2016-0850, CVE-2016-1503, CVE-2016-2409, CVE-2016-2410, CVE-2016-2411, CVE-2016-2412, CVE-2016-2413, CVE-2016-2414, CVE-2016-2415, CVE-2016-2416, CVE-2016-2417, CVE-2016-2418, CVE-2016-2419, CVE-2016-2420, CVE-2016-2421, CVE-2016-2422, CVE-2016-2423, CVE-2016-2424, CVE-2016-2425, CVE-2016-2426, CVE-2016-2427
Suggested Action
CCIRC recommends that system administrators look to their respective Android phone vendor and wireless carrier for when the updates will be available, then test and deploy the vendor-released updates to affected applications and devices accordingly.
References:
Android web site: https://source.android.com/security/bulletin/2016-04-02.html