December Android security bulletin now available, but without Google Pixel update yet

Google has published the latest Android Security Bulletin which provides details on the potential security vulnerabilities that have been fixed with the latest December patch. However, the Google Pixel December update is not yet available for download, but there is a reason for that.

The December Android security bulletin reveals that the latest 2023-12-0X security patch level (SPL) has fixed 85 vulnerabilities, among which ‘CVE-2023-40088’ stands out. The latter is listed as ‘RCE’ (Remote code execution) as it allowed attackers to ‘inject’ their own code into a person’s device without them realizing or approving permissions.

According to Android expert Mishaal Rahman, patches are available for Android 11 devices onwards. One of the vulnerabilities mentioned in the bulletin (CVE-2023-45779) was even capable of affecting ‘misc OEM’ components, which the expert describes as ‘pretty embarrassing’.

Typically, each Android security bulletin is accompanied by a monthly Google Pixel update. However, this time is different, since the next update for the company’s devices will be a Pixel Feature Drop.

Pixel Feature Drops (also known as ‘QPR’ or Quarterly Platform Release) focus on adding multiple features and notable improvements. So, the company prefers that these types of updates have their own ‘special day’ where they can gain greater prominence. More specifically, this one will be based on Android QPR1, which has been in beta for weeks.

Although an exact date for the Google Pixel December patch rollout has not yet been confirmed, it is possible that it will be available at some point during this week. Pixel device users just have to wait a little longer to receive the latest Feature Drop update, with all its new features and improvements.