Google has addressed two critical flaws in its latest monthly Android update that enable remote code execution (RCE) on Android mobile devices. The critical bugs (CVE-2020-0117 and CVE-2020-8597) exist in the Android System area, and would allow a remote attacker using a specially crafted transmission to execute arbitrary code within the context of a privileged process.

Read full article on Threat Post