Google will kickstart its annual developer conference, I/O 2018 later today in Mountain View, California. At the event, Google is expected to release the second developer preview of Android P but in the meantime, it has also released the Android security patch for May 2018.
The May 2018 Android security patch is being rolled out for Pixel and Nexus devices. Alongside the OTA update, Google has also released the Android 8.1 Oreo factory images and OTA files for Pixel 2, Pixel 2 XL, Pixel, Pixel XL, Pixel C, Nexus 6P, and Nexus 5X. The Android security bulletin shows there are two versions of the update available, but it is not clear if there is any difference between those two versions.
For those who don’t feel like sideloading the security patch, Google is releasing the update in a phased manner, and should be available via Settings -> System -> System Update -> Check for update. Google has also released the Android Security Bulletin for May 2018 detailing all the security vulnerabilities fixed with this update.
Google says the most severe of these issues is a critical security vulnerability in Media framework that could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process. It also notes that there are no reports of active customer exploitation or abuse of these newly reported issues.
Google has also released a separate Security Bulletin for Pixel and Nexus devices, which shows the update improves multitouch detection on all Pixel and Nexus devices. The update also brings adjustment to the Pixel XL’s charging behavior.
On a broader terms, Google says the May security patch dated 2018-05-01 for Android brings fix to Android runtime, Framework, Media framework, System while the security patch dated 2018-05-05 brings fix to kernel components, NVIDIA components and Qualcomm components. Most of these vulnerabilities have been marked as high while the media framework is termed as critical.
Watch: Huawei P20 Pro Video Review
Google says its Android partners have been notified of all issues at least a month before publication while source code patches will be released to the Android Open Source Project (AOSP) in the next 48 hours. Major OEMs supporting Android should release the update in the next few weeks but most will release updates at a later stage.