December security patches include fixes to 15 issues. Most of the vulnerabilities range from moderate to critical. The most severe bug is related to the media framework and remote attacker executing arbitrary code through a crafted file. The December 2019 update includes fixes for three critical vulnerabilities.
Google has highlighted one vulnerability as the most severe, another vulnerability caused a permanent denial of service, and the third vulnerability could cause Android notification error. Unfortunately not all the Android devices received this patch.
The company has noted that no critical security vulnerability affecting Android was publicly disclosed without security update. There was an increase of 84% in terms of year over year (YoY) security patches issued during Q4 of 2018. The last update to Pixel phones started includes fixes for all known issues on the Pixel phone.
Last few months have been critical for Android security. First was the vulnerability affecting Google and Samsung camera apps. The vulnerability could allow attackers to take full control of the camera and secretly click photos and record audio.
Google has fixed the security vulnerability disclosed in the December 2019. The newer devices from top manufacturers will receive the update soon. Those with older devices and Android version may not receive the update at all.