today provided details concerning the October security update for Android. Google says the newest patch solves a number of vulnerabilities in the Android source code impacting the framework, media framework, system, and kernel. The most critical issue was centered in the framework and "could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process." As far as Google knows, none of the security lapses were exploited for any means by hackers. Google revealed these problems to its OEM partners a month ago. The company is making two updates available, one dated October 1 and the other dated October 5. These updates should reach Google's branded Pixel and Nexus devices over the next week or so. The company plans to distribute the patched code to AOSP within 48 hours. Following Google's announcement, Essential Products
said it, too, is offering its own PH-1 Essential Phone the same security patches. Further, the update from Essential brings back support for notch controls. Owners of the Essential Phone can expect to receive the update in the next few days.