BlackBerry has today rolled out the January 2018 Android Security update to BlackBerry Android devices.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. BlackBerry releases security bulletins to notify users of its Android smartphones about available security fixes.
The following vulnerabilities have been remediated in this update:
| Summary | CVE | ||
| Elevation of Privilege in Android Runtime | CVE-2017-13176 | ||
| Remote Code Execution in Media Framework | CVE-2017-13177 | ||
| Remote Code Execution in Media Framework | CVE-2017-13178 | ||
| Remote Code Execution in Media Framework | CVE-2017-13179 | ||
| Elevation of Privilege in Media Framework | CVE-2017-0770 | ||
| Elevation of Privilege in Media Framework | CVE-2017-13180 | ||
| Elevation of Privilege in Media Framework | CVE-2017-13181 | ||
| Denial of Service in Media Framework | CVE-2017-0855 | ||
| Denial of Service in Media Framework | CVE-2017-13191 | ||
| Denial of Service in Media Framework | CVE-2017-13192 | ||
| Denial of Service in Media Framework | CVE-2017-13193 | ||
| Denial of Service in Media Framework | CVE-2017-13195 | ||
| Denial of Service in Media Framework | CVE-2017-13196 | ||
| Denial of Service in Media Framework | CVE-2017-13197 | ||
| Remote Code Execution in System | CVE-2017-13208 | ||
| Elevation of Privilege in System | CVE-2017-13210 | ||
| Elevation of Privilege in Kernel Skcipher | CVE-2017-13215 | ||
| Elevation of Privilege in Kernel Ashmem | CVE-2017-13216 | ||
| Information Disclosure in Kernel High Performance Timers | CVE-2017-13218 | ||
| Elevation of Privilege in Qualcomm Display | CVE-2017-15849 | ||
| Elevation of Privilege in Qualcomm Bootloader | CVE-2017-11069 | ||
| Vulnerability in Qualcomm Linux Kernel | CVE-2013-4397 | ||
| Information Disclosure in Framework | CVE-2017-0846 | ||
| Information Disclosure in Media Framework | CVE-2017-13201 | ||
| Information Disclosure in Media Framework | CVE-2017-13202 | ||
| Information Disclosure in Media Framework | CVE-2017-13206 | ||
| Information Disclosure in Media Framework | CVE-2017-13207 | ||
| Denial of Service in Media Framework | CVE-2017-13185 | ||
| Denial of Service in Media Framework | CVE-2017-13187 | ||
| Denial of Service in Media Framework | CVE-2017-13188 | ||
| Denial of Service in Media Framework | CVE-2017-13203 | ||
| Denial of Service in Media Framework | CVE-2017-13204 | ||
| Denial of Service in Media Framework | CVE-2017-13205 | ||
| Information Disclosure in Media Framework | CVE-2017-13200 | ||
| Denial of Service in Media Framework | CVE-2017-13186 | ||
| Denial of Service in Media Framework | CVE-2017-13189 | ||
| Denial of Service in Media Framework | CVE-2017-13190 | ||
| Denial of Service in Media Framework | CVE-2017-13194 | ||
| Denial of Service in Media Framework | CVE-2017-13198 | ||
| Denial of Service in Kernel Synaptics Touchscreen Controller | CVE-2017-13219 | ||
| Elevation of Privilege in Kernel BlueZ | CVE-2017-13220 | ||
| Elevation of Privilege in Kernel | CVE-2017-11473 | ||
| Information Disclosure in Kernel | CVE-2017-1414 | ||
| Elevation of Privilege in Qualcomm SOC Driver | CVE-2017-9705 | ||
| Elevation of Privilege in Qualcomm SOC Driver | CVE-2017-15847 | ||
| Elevation of Privilege in Qualcomm WLan | CVE-2017-11081 | ||
| Elevation of Privilege in Qualcomm WLan | CVE-2017-15845 | ||
| Elevation of Privilege in Qualcomm Graphics Driver | CVE-2017-14873 | ||
| Elevation of Privilege in Qualcomm Bootloader | CVE-2017-11003 | ||
| Elevation of Privilege in Qualcomm HDMI Driver | CVE-2017-9689 | ||
| Elevation of Privilege in Qualcomm IPA Driver | CVE-2017-14879 | ||
| Elevation of Privilege in Qualcomm Bootloader | CVE-2017-11080 | ||
| Information Disclosure in Qualcomm Bootloader | CVE-2017-14869 | ||
| Information Disclosure in Qualcomm Bootloader | CVE-2017-11066 | ||
| Information Disclosure in Qualcomm Microphone Driver | CVE-2017-15850 | ||
| Information Disclosure in Qualcomm Wireless Driver | CVE-2017-9712 | ||
| Information Disclosure in Qualcomm Bootloader | CVE-2017-11079 | ||
| Information Disclosure in Qualcomm Bootloader | CVE-2017-14870 | ||
| Information Disclosure in Qualcomm Bootloader | CVE-2017-11079 |
If you own an Android device from BlackBerry and are not seeing the system update message, you can check manually by heading into Settings -> About phone -> System updates and checking manually.
Look for Android security patch level January 1, 2018 or later.
Updated software builds may also be available from other retailers or carriers, dependent on their deployment schedules.
