Android security: Google patches dozens of dangerous bugs, including some in Oreo

Google has detailed but not yet released the September patch that brings fixes for Android, the Linux kernel, and components from Broadcom, Qualcomm, and MediaTek.

The most severe issue fixed in the September Android update comes from Android's troublesome media framework. It had 24 vulnerabilities, of which 10 are critical. Android 8.0 Oreo is affected by 11 these flaws.

The worst one "could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process", according to Google's September 2017 Android Security Bulletin.