BlackBerry has today rolled out the October 2018 Android Security update to BlackBerry Android devices.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. BlackBerry releases security bulletins to notify users of its Android smartphones about available security fixes.
The following vulnerabilities have been remediated in this update:
| Summary | CVE | ||
| Elevation of Privilege in Framework | CVE-2018-9490 | ||
| Remote Code Execution in Framework | CVE-2018-9491 | ||
| Elevation of Privilege in Framework | CVE-2018-9492 | ||
| Information Disclosure in Framework | CVE-2018-9493 | ||
| Denial of Service in Framework | CVE-2018-9452 | ||
| Remote Code Execution in Media Framework | CVE-2018-9497 | ||
| Remote Code Execution in Media Framework | CVE-2018-9498 | ||
| Information Disclosure in Media Framework | CVE-2018-9499 | ||
| Remote Code Execution in System | CVE-2017-13283 | ||
| Elevation of Privilege in System | CVE-2018-9476 | ||
| Remote Code Execution in System | CVE-2018-9504 | ||
| Elevation of Privilege in System | CVE-2018-9501 | ||
| Information Disclosure in System | CVE-2018-9502 | ||
| Information Disclosure in System | CVE-2018-9503 | ||
| Information Disclosure in System | CVE-2018-9505 | ||
| Information Disclosure in System | CVE-2018-9506 | ||
| Information Disclosure in System | CVE-2018-9507 | ||
| Information Disclosure in System | CVE-2018-9508 | ||
| Information Disclosure in System | CVE-2018-9509 | ||
| Information Disclosure in System | CVE-2018-9510 | ||
| Elevation of Privilege in Kernel Components | CVE-2018-9514 | ||
| Elevation of Privilege in Kernel Components | CVE-2018-9515 | ||
| Vulnerability in Qualcomm Closed-Source Components | CVE-2017-18315 |
If you own an Android device from BlackBerry and are not seeing the system update message, you can check manually by heading into Settings -> About phone -> System updates and checking manually. Look for the following Android security patch level October 5, 2018 or later.
Updated software builds may also be available from other retailers or carriers, dependent on their deployment schedules.
