Since new does not equal better, please let us know your thoughts on that as well! Your insights have been excellent thus far!
Since new does not equal better, please let us know your thoughts on that as well! Your insights have been excellent thus far!
Only thing I've spotted so far is the n71_n71 combo being back again. Not very useful.Since new does not equal better, please let us know your thoughts on that as well! Your insights have been excellent thus far!
ims.ims_user_agent_string > T-Mobile VoNR-ePDG-IR94-RTT-ussd #MANUFACTURE#/#MODEL# #BUILD#
Revisions
33.0.2 (May 2022)
- fastboot
- Support for the vendor_kernel_boot partition.
Magisk Changelog
v25.1
- [MagiskBoot] Fix ramdisk backup being incorrectly skipped
- [MagiskBoot] Add new feature to detect unsupported dtb and abort during installation
- [Zygisk] Change binary hijack paths
- [App] Fix incorrect recovery mode detection and installation
- [MagiskInit] Fix config not properly exported in legacy SAR devices
- [General] Enforce the Magisk app to always match or be newer than magiskd
v25.0
- [MagiskInit] Update 2SI implementation, significantly increase device compatibility (e.g. Sony Xperia devices)
- [MagiskInit] Introduce new sepolicy injection mechanism
- [MagiskInit] Support Oculus Go
- [MagiskInit] Support Android 13 GKIs (Pixel 6)
- [MagiskBoot] Fix vbmeta extraction implementation
- [App] Fix stub app on older Android versions
- [App] [MagiskSU] Properly support apps using sharedUserId
- [MagiskSU] Fix a possible crash in magiskd
- [MagiskSU] Prune unused UIDs as soon as system_server restarts to prevent UID reuse attacks
- [MagiskSU] Verify and enforce the installed Magisk app’s certificate to match the distributor’s signature
- [MagiskSU] [Zygisk] Proper package management and detection
- [Zygisk] Fix function hooking on devices running Android 12 with old kernels
- [Zygisk] Fix Zygisk’s self code unloading implementation
- [DenyList] Fix DenyList on shared UID apps
- [BusyBox] Add workaround for devices running old kernels
2022.6.19 Magisk v25.1
Another major release! A lot of the changes aren’t visible at the surface, but v25 is actually a really substantial upgrade!v25.1 fixes some minor bugs over v25.0. The following are the same as v25.0 release notes.
MagiskInit Rewrite
A significant portion of magiskinit (the critical software that runs before your device boots up) is completely rewritten from scratch. Ever since Android introduced Project Treble in Android 8.0, Magisk has been constantly fighting against the increasingly complex partitioning and early mount setups of all kinds of devices, sometimes with weird OEM specific implementations. It got to a point that magiskinit had become so complicated that few people (including myself!) were aware of every detail, and maintaining this piece of software like this was clearly not sustainable. After many months of planning (yes, this whole re-architecture has been in my head for a long time) and some help from external contributors, a whole new sepolicy injection mechanism is introduced into Magisk, solving the “SELinux Problem” once and for all.
Since this is a full paradigm shift on how Magisk hot-patch the device at boot, several behaviors that many developers implicitly relied on might not exist. For example, Magisk no longer patches fstabs in most scenarios, which means AVB will remain intact; some custom kernels rely on AVB being stripped out for them by Magisk.
MagiskSU Security Enhancements
The superuser functionality of Magisk has not seen much changes ever since its introduction. v25 focuses on making root permission management more accurate and secure:
Many might not realize, but using a trusted, unmodified Magisk app is really important. Magisk’s root daemon treats the Magisk app differently and gives it blanket root access without any restrictions. A modded Magisk app can potentially backdoor your device.
- Add a whole new package tracking system to ensure malicious UID reuse attack cannot be performed
- Properly support and implement the UX in the Magisk app for packages using sharedUserId
- Enforce root manager APK signature verification to combat the rampant unofficial Magisk app “mods”
And in case some of you are about to put on your tin foil hats, this is not designed to “vendor lock-in”; the goal is to make sure your root management app comes from the same developer of the underlying root implementation. Magisk’s build system allows custom distributors to use its own signing keys, and in addition, I am also providing official debug builds which skips any signature verification for development.
yeah, it may not be possible to remove the greyed out oem unlocking just by removing a package with these phones. IIRC, previously it didn't work to unlock bootloader just with the temp sim unlock, but if it does for you that would be great news! It's much easier to obtain a temp sim unlock than a perm unlock
![]()
Yep, holiday today so no update.
...Wait for it...wait for it...
BOOOOOO!
Oh no! They "usually" release it the next day, or sometimes the next day or two.
Thanks! I didn't realize they ever mention when the next update will come out in those bulletins.Oh no! They "usually" release it the next day, or sometimes the next day or two.
Important: The Android Security Bulletins are published on the first Monday of each month unless that Monday falls on a holiday. If the first Monday of the month is a holiday the bulletins will be published on the following work day.
Looks like July 7.
- For July, the Android public security bulletin will be released on July 7, 2021
Android Security Bulletin—June 2021 | Android Open Source Project
source.android.com
I think they only do it when it will be off schedule, like when it's a holiday or for some other reason.Thanks! I didn't realize they ever mention when the next update will come out in those bulletins.
this is 2021...Oh no! They "usually" release it the next day, or sometimes the next day or two.
Important: The Android Security Bulletins are published on the first Monday of each month unless that Monday falls on a holiday. If the first Monday of the month is a holiday the bulletins will be published on the following work day.
Looks like July 7.
- For July, the Android public security bulletin will be released on July 7, 2021
Android Security Bulletin—June 2021 | Android Open Source Project
source.android.com
I think they only do it when it will be off schedule, like when it's a holiday or for some other reason.
You are correct! Thanks for noticing. I don't see any reference to July in June 2022's.
Oh crap, lol.
It will come July 11th, the security bulletin is usually dated the 5th of the month. This could come at any point, which does not indicate the actual release date of the update.You are correct! Thanks for noticing. I don't see any reference to July in June 2022's.
v25.2
- [MagiskInit] Fix a potential issue when stub cpio is used
- [MagiskInit] Fix reboot to recovery when stub cpio is used
- [MagiskInit] Fix sepolicy.rules symlink for rootfs devices
- [General] Better data encryption detection
- [General] Move the whole logging infrastructure into Rust
Pixel Update Bulletin—August 2022
Published August 1, 2022
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices (Google devices). For Google devices, security patch levels of 2022-08-05 or later address all issues in this bulletin and all issues in the August 2022 Android Security Bulletin. To learn how to check a device's security patch level, see Check and update your Android version.
All supported Google devices will receive an update to the 2022-08-05 patch level. We encourage all customers to accept these updates to their devices.
Note: The Google device firmware images are available on the Google Developer site.
Announcements
- In addition to the security vulnerabilities described in the August 2022 Android Security Bulletin, Google devices also contain patches for the security vulnerabilities described below.
Security patches
Vulnerabilities are grouped under the component that they affect. There is a description of the issue and a table with the CVE, associated references, type of vulnerability, severity, and updated Android Open Source Project (AOSP) versions (where applicable). When available, we link the public change that addressed the issue to the bug ID, like the AOSP change list. When multiple changes relate to a single bug, additional references are linked to numbers following the bug ID.
Kernel components
CVE References Type Severity Component CVE-2021-3609 A-223967238
Upstream kernelEoP Moderate Kernel CVE-2021-39714 A-205573273
Upstream kernel [2] [3] [4] [5] [6]EoP Moderate Kernel CVE-2022-0435 A-228560328
Upstream kernelEoP Moderate Kernel CVE-2022-0995 A-227638011
Upstream kernel [2] [3] [4] [5] [6] [7] [8]EoP Moderate Kernel CVE-2022-1011 A-226679409
Upstream kernelEoP Moderate Kernel CVE-2022-1055 A-228390920
Upstream kernelEoP Moderate Kernel CVE-2022-20158 A-182815710
Upstream kernel [2]EoP Moderate Kernel CVE-2022-20368 A-224546354
Upstream kernelEoP Moderate Kernel CVE-2022-20369 A-223375145
Upstream kernelEoP Moderate Kernel CVE-2022-20371 A-195565510
Upstream kernelEoP Moderate Kernel CVE-2022-20382 A-214245176
Upstream kernelEoP Moderate Kernel CVE-2022-27666 A-227452856
Upstream kernelEoP Moderate Kernel CVE-2022-29581 A-233075473
Upstream kernelEoP Moderate Kernel
Pixel
CVE References Type Severity Component CVE-2022-20237 A-229621649 * RCE Critical Modem CVE-2022-20400 A-225178325* RCE Critical Modem CVE-2022-20402 A-218701042 * RCE Critical Modem CVE-2022-20403 A-207975764 * RCE Critical Modem CVE-2022-20180 A-212804042* EoP High Kernel CVE-2022-20377 A-222339795* EoP High Trusty CVE-2022-20380 A-212625740 * ID High Modem CVE-2022-20365 A-229632566 * EoP Moderate Userland CVE-2022-20366 A-225877745 * EoP Moderate Kernel CVE-2022-20367 A-225877459* EoP Moderate Kernel CVE-2022-20372 A-195480799 * EoP Moderate Kernel CVE-2022-20373 A-208269510* EoP Moderate Kernel CVE-2022-20374 A-201078231* EoP Moderate Modem CVE-2022-20376 A-216130110* EoP Moderate Kernel CVE-2022-20378 A-234657153* EoP Moderate Modem CVE-2022-20379 A-209436980 * EoP Moderate Kernel CVE-2022-20381 A-188935887* EoP Moderate Kernel CVE-2022-20383 A-222408847* EoP Moderate Camera CVE-2022-20384 A-211727306* EoP Moderate Modem CVE-2022-20405 A-216363416* EoP Moderate Modem CVE-2022-20370 A-215730643 * ID Moderate Modem CVE-2022-20401 A-226446030* ID Moderate Modem CVE-2022-20404 A-205714161* ID Moderate Modem CVE-2022-20406 A-184676385* ID Moderate Modem CVE-2022-20408 A-204782372* ID Moderate Modem CVE-2022-20375 A-180956894* DoS Moderate Modem CVE-2022-20407 A-210916981* DoS Moderate Modem
Common questions and answers
This section answers common questions that may occur after reading this bulletin.
1. How do I determine if my device is updated to address these issues?
Security patch levels of 2022-08-05 or later address all issues associated with the 2022-08-05 security patch level and all previous patch levels. To learn how to check a device's security patch level, read the instructions on the Google device update schedule.
2. What do the entries in the Type column mean?
Entries in the Type column of the vulnerability details table reference the classification of the security vulnerability.
Abbreviation Definition RCE Remote code execution EoP Elevation of privilege ID Information disclosure DoS Denial of service N/A Classification not available
3. What do the entries in the References column mean?
Entries under the References column of the vulnerability details table may contain a prefix identifying the organization to which the reference value belongs.
Prefix Reference A- Android bug ID QC- Qualcomm reference number M- MediaTek reference number N- NVIDIA reference number B- Broadcom reference number U- UNISOC reference number
4. What does an * next to the Android bug ID in the References column mean?
Issues that are not publicly available have an * next to the Android bug ID in the References column. The update for that issue is generally contained in the latest binary drivers for Pixel devices available from the Google Developer site.
5. Why are security vulnerabilities split between this bulletin and the Android Security Bulletins?
Security vulnerabilities that are documented in the Android Security Bulletins are required to declare the latest security patch level on Android devices. Additional security vulnerabilities, such as those documented in this bulletin are not required for declaring a security patch level.
Versions
Version Date Notes 1.0 August 1, 2022 Bulletin Published
“August 2022 update for all supported Pixel devices will begin rollout in the coming weeks.”I am not going to bother with the second July update. Hopefully the August update will be here soon. My guess is that it will arrive on Monday Aug 8.
12.1.0 (SQ3A.220705.003.A3, Jul 2022, Verizon, Verizon MVNOs) | Flash | Link | 5651ee94a61222e2c03ca55b76f4aa452c5eed9e43ad8aabb7060739177e1689 |
12.1.0 (SQ3A.220705.004.A1, Jul 2022, Softbank) | Flash | Link | 6b60f5a6401b35c635408494b54323825a8bcf5c85384a7cc2c241849a2d7413 |
12.1.0 (SQ3A.220705.004, Jul 2022) | Flash | Link | 112d4f32aeaac5352596837b2b71cb94ffd57b4c515264d776921c42fd9164be |
12.1.0 (SQ3A.220705.001.B2, Jul 2022, EMEA) | Flash | Link | 2ee23ef4941d11d37edfeb0d7a4c60a7298385307b24b157642c8353da8edb26 |
" Google did share today that the “August 2022 update for all supported Pixel devices will begin rollout in the coming weeks."
Also...
"Google’s three latest phones are getting a “Fix for GPS location failure under certain conditions.” For the Pixel 6 and 6 Pro, this is still just the July security patch, while the 6a is likely still on the June patch level."
Guess that explains the surprise new July builds, in part at least...
Google rolling out GPS fix for Pixel 6/Pro and 6a, August update coming
This month's odd Pixel update situation...9to5google.com
12.1.0 (SQ3A.220705.003.A3, Jul 2022, Verizon, Verizon MVNOs) | Flash | Link | 5651ee94a61222e2c03ca55b76f4aa452c5eed9e43ad8aabb7060739177e1689 |
12.1.0 (SQ3A.220705.004.A1, Jul 2022, Softbank) | Flash | Link | 6b60f5a6401b35c635408494b54323825a8bcf5c85384a7cc2c241849a2d7413 |
Pixel Update Bulletin—August 2022
Published August 1, 2022
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices (Google devices). For Google devices, security patch levels of 2022-08-05 or later address all issues in this bulletin and all issues in the August 2022 Android Security Bulletin. To learn how to check a device's security patch level, see Check and update your Android version.
All supported Google devices will receive an update to the 2022-08-05 patch level. We encourage all customers to accept these updates to their devices.
Note: The Google device firmware images are available on the Google Developer site.
Announcements
- In addition to the security vulnerabilities described in the August 2022 Android Security Bulletin, Google devices also contain patches for the security vulnerabilities described below.
Security patches
Vulnerabilities are grouped under the component that they affect. There is a description of the issue and a table with the CVE, associated references, type of vulnerability, severity, and updated Android Open Source Project (AOSP) versions (where applicable). When available, we link the public change that addressed the issue to the bug ID, like the AOSP change list. When multiple changes relate to a single bug, additional references are linked to numbers following the bug ID.
Kernel components
CVE References Type Severity Component CVE-2021-3609 A-223967238
Upstream kernelEoP Moderate Kernel CVE-2021-39714 A-205573273
Upstream kernel [2] [3] [4] [5] [6]EoP Moderate Kernel CVE-2022-0435 A-228560328
Upstream kernelEoP Moderate Kernel CVE-2022-0995 A-227638011
Upstream kernel [2] [3] [4] [5] [6] [7] [8]EoP Moderate Kernel CVE-2022-1011 A-226679409
Upstream kernelEoP Moderate Kernel CVE-2022-1055 A-228390920
Upstream kernelEoP Moderate Kernel CVE-2022-20158 A-182815710
Upstream kernel [2]EoP Moderate Kernel CVE-2022-20368 A-224546354
Upstream kernelEoP Moderate Kernel CVE-2022-20369 A-223375145
Upstream kernelEoP Moderate Kernel CVE-2022-20371 A-195565510
Upstream kernelEoP Moderate Kernel CVE-2022-20382 A-214245176
Upstream kernelEoP Moderate Kernel CVE-2022-27666 A-227452856
Upstream kernelEoP Moderate Kernel CVE-2022-29581 A-233075473
Upstream kernelEoP Moderate Kernel
Pixel
CVE References Type Severity Component CVE-2022-20237 A-229621649 * RCE Critical Modem CVE-2022-20400 A-225178325* RCE Critical Modem CVE-2022-20402 A-218701042 * RCE Critical Modem CVE-2022-20403 A-207975764 * RCE Critical Modem CVE-2022-20180 A-212804042* EoP High Kernel CVE-2022-20377 A-222339795* EoP High Trusty CVE-2022-20380 A-212625740 * ID High Modem CVE-2022-20365 A-229632566 * EoP Moderate Userland CVE-2022-20366 A-225877745 * EoP Moderate Kernel CVE-2022-20367 A-225877459* EoP Moderate Kernel CVE-2022-20372 A-195480799 * EoP Moderate Kernel CVE-2022-20373 A-208269510* EoP Moderate Kernel CVE-2022-20374 A-201078231* EoP Moderate Modem CVE-2022-20376 A-216130110* EoP Moderate Kernel CVE-2022-20378 A-234657153* EoP Moderate Modem CVE-2022-20379 A-209436980 * EoP Moderate Kernel CVE-2022-20381 A-188935887* EoP Moderate Kernel CVE-2022-20383 A-222408847* EoP Moderate Camera CVE-2022-20384 A-211727306* EoP Moderate Modem CVE-2022-20405 A-216363416* EoP Moderate Modem CVE-2022-20370 A-215730643 * ID Moderate Modem CVE-2022-20401 A-226446030* ID Moderate Modem CVE-2022-20404 A-205714161* ID Moderate Modem CVE-2022-20406 A-184676385* ID Moderate Modem CVE-2022-20408 A-204782372* ID Moderate Modem CVE-2022-20375 A-180956894* DoS Moderate Modem CVE-2022-20407 A-210916981* DoS Moderate Modem
Common questions and answers
This section answers common questions that may occur after reading this bulletin.
1. How do I determine if my device is updated to address these issues?
Security patch levels of 2022-08-05 or later address all issues associated with the 2022-08-05 security patch level and all previous patch levels. To learn how to check a device's security patch level, read the instructions on the Google device update schedule.
2. What do the entries in the Type column mean?
Entries in the Type column of the vulnerability details table reference the classification of the security vulnerability.
Abbreviation Definition RCE Remote code execution EoP Elevation of privilege ID Information disclosure DoS Denial of service N/A Classification not available
3. What do the entries in the References column mean?
Entries under the References column of the vulnerability details table may contain a prefix identifying the organization to which the reference value belongs.
Prefix Reference A- Android bug ID QC- Qualcomm reference number M- MediaTek reference number N- NVIDIA reference number B- Broadcom reference number U- UNISOC reference number
4. What does an * next to the Android bug ID in the References column mean?
Issues that are not publicly available have an * next to the Android bug ID in the References column. The update for that issue is generally contained in the latest binary drivers for Pixel devices available from the Google Developer site.
5. Why are security vulnerabilities split between this bulletin and the Android Security Bulletins?
Security vulnerabilities that are documented in the Android Security Bulletins are required to declare the latest security patch level on Android devices. Additional security vulnerabilities, such as those documented in this bulletin are not required for declaring a security patch level.
Versions
Version Date Notes 1.0 August 1, 2022 Bulletin Published
Android Security Bulletin—August 2022
Published August 1, 2022
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2022-08-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version.
Android partners are notified of all issues at least a month before publication. Source code patches for these issues will be released to the Android Open Source Project (AOSP) repository in the next 48 hours. We will revise this bulletin with the AOSP links when they are available.
The most severe of these issues is a critical security vulnerability in the System component that could lead to remote code execution over Bluetooth with no additional execution privileges needed. The severity assessment is based on the effect that exploiting the vulnerability would possibly have on an affected device, assuming the platform and service mitigations are turned off for development purposes or if successfully bypassed.
Refer to the Android and Google Play Protect mitigations section for details on the Android security platform protections and Google Play Protect, which improve the security of the Android platform.
Note: Information on the latest over-the-air update (OTA) and firmware images for Google devices is available in the August 2022 Pixel Update Bulletin.
Android and Google service mitigations
This is a summary of the mitigations provided by the Android security platform and service protections such as Google Play Protect. These capabilities reduce the likelihood that security vulnerabilities could be successfully exploited on Android.
- Exploitation for many issues on Android is made more difficult by enhancements in newer versions of the Android platform. We encourage all users to update to the latest version of Android where possible.
- The Android security team actively monitors for abuse through Google Play Protect and warns users about Potentially Harmful Applications. Google Play Protect is enabled by default on devices with Google Mobile Services, and is especially important for users who install apps from outside of Google Play.
2022-08-01 security patch level vulnerability details
In the sections below, we provide details for each of the security vulnerabilities that apply to the 2022-08-01 patch level. Vulnerabilities are grouped under the component they affect. Issues are described in the tables below and include CVE ID, associated references, type of vulnerability, severity, and updated AOSP versions (where applicable). When available, we link the public change that addressed the issue to the bug ID, like the AOSP change list. When multiple changes relate to a single bug, additional references are linked to numbers following the bug ID. Devices with Android 10 and later may receive security updates as well as Google Play system updates.
Framework
The most severe vulnerability in this section could lead to local escalation of privilege with no additional execution privileges needed.
CVE References Type Severity Updated AOSP versions CVE-2021-39696 A-185810717 EoP High 10, 11, 12 CVE-2022-20344 A-232541124 EoP High 10, 11, 12, 12L CVE-2022-20348 A-228315529 EoP High 10, 11, 12, 12L CVE-2022-20349 A-228315522 EoP High 10, 11, 12, 12L CVE-2022-20356 A-215003903 EoP High 11, 12, 12L CVE-2022-20350 A-228178437 ID High 10, 11, 12, 12L CVE-2022-20352 A-222473855 ID High 12, 12L CVE-2022-20357 A-214999987 ID High 12, 12L CVE-2022-20358 A-203229608 ID High 10, 11, 12, 12L
Media Framework
The most severe vulnerability in this section could lead to remote information disclosure with no additional execution privileges needed.
CVE References Type Severity Updated AOSP versions CVE-2022-20346 A-230493653 ID High 10, 11, 12, 12L CVE-2022-20353 A-221041256 ID High 10, 11, 12, 12L
System
The most severe vulnerability in this section could lead to remote code execution over Bluetooth with no additional execution privileges needed.
CVE References Type Severity Updated AOSP versions CVE-2022-20345 A-230494481 RCE Critical 12, 12L CVE-2022-20347 A-228450811 EoP High 10, 11, 12, 12L CVE-2022-20354 A-219546241 EoP High 11, 12, 12L CVE-2022-20360 A-228314987 EoP High 10, 11, 12, 12L CVE-2022-20361 A-231161832 EoP High 10, 11, 12, 12L CVE-2022-20355 A-219498290 DoS High 10, 11, 12, 12L
Google Play system updates
The following issues are included in Project Mainline components.
Component CVE Media Framework components CVE-2022-20346
2022-08-05 security patch level vulnerability details
In the sections below, we provide details for each of the security vulnerabilities that apply to the 2022-08-05 patch level. Vulnerabilities are grouped under the component they affect. Issues are described in the tables below and include CVE ID, associated references, type of vulnerability, severity, and updated AOSP versions (where applicable). When available, we link the public change that addressed the issue to the bug ID, like the AOSP change list. When multiple changes relate to a single bug, additional references are linked to numbers following the bug ID.
Kernel components
The vulnerability in this section could lead to local escalation of privileges with User execution privileges needed.
CVE References Type Severity Component CVE-2022-1786 A-233078742
Upstream kernelEoP High Filesystem (fs)
Imagination Technologies
These vulnerabilities affect Imagination Technologies components and further details are available directly from Imagination Technologies. The severity assessment of these issues is provided directly by Imagination Technologies.
CVE References Severity Component CVE-2021-0698 A-236848165* High PowerVR-GPU CVE-2021-0887 A-236848817* High PowerVR-GPU CVE-2021-0891 A-236849490* High PowerVR-GPU CVE-2021-0946 A-236846966* High PowerVR-GPU CVE-2021-0947 A-236838960* High PowerVR-GPU CVE-2021-39815 A-232440670* High PowerVR-GPU CVE-2022-20122 A-232441339* High PowerVR-GPU
MediaTek components
This vulnerability affects MediaTek components and further details are available directly from MediaTek. The severity assessment of this issue is provided directly by MediaTek.
CVE References Severity Component CVE-2022-20082 A-231271467
M-ALPS07044730*High GPU
Unisoc components
This vulnerability affects Unisoc components and further details are available directly from Unisoc. The severity assessment of this issue is provided directly by Unisoc.
CVE References Severity Component CVE-2022-20239 A-233972091
U-1883877*High VSP
Qualcomm components
This vulnerability affects Qualcomm components and are described in further detail in the appropriate Qualcomm security bulletin or security alert. The severity assessment of this issue is provided directly by Qualcomm.
CVE References Severity Component CVE-2022-22080 A-231156274
QC-CR#2898981High Audio
Qualcomm closed-source components
These vulnerabilities affect Qualcomm closed-source components and are described in further detail in the appropriate Qualcomm security bulletin or security alert. The severity assessment of these issues is provided directly by Qualcomm.
CVE References Severity Component CVE-2021-30259 A-187074564* High Closed-source component CVE-2022-22059 A-231156126* High Closed-source component CVE-2022-22061 A-218338332* High Closed-source component CVE-2022-22062 A-218338070* High Closed-source component CVE-2022-22067 A-218338889* High Closed-source component CVE-2022-22069 A-218339148* High Closed-source component CVE-2022-22070 A-218338870* High Closed-source component CVE-2022-25668 A-231156523* High Closed-source component
Common questions and answers
This section answers common questions that may occur after reading this bulletin.
1. How do I determine if my device is updated to address these issues?
To learn how to check a device's security patch level, see Check and update your Android version.
- Security patch levels of 2022-08-01 or later address all issues associated with the 2022-08-01 security patch level.
- Security patch levels of 2022-08-05 or later address all issues associated with the 2022-08-05 security patch level and all previous patch levels.
Device manufacturers that include these updates should set the patch string level to:
- [ro.build.version.security_patch]:[2022-08-01]
- [ro.build.version.security_patch]:[2022-08-05]
For some devices on Android 10 or later, the Google Play system update will have a date string that matches the 2022-08-01 security patch level. Please see this article for more details on how to install security updates.
2. Why does this bulletin have two security patch levels?
This bulletin has two security patch levels so that Android partners have the flexibility to fix a subset of vulnerabilities that are similar across all Android devices more quickly. Android partners are encouraged to fix all issues in this bulletin and use the latest security patch level.
- Devices that use the 2022-08-01 security patch level must include all issues associated with that security patch level, as well as fixes for all issues reported in previous security bulletins.
- Devices that use the security patch level of 2022-08-05 or newer must include all applicable patches in this (and previous) security bulletins.
Partners are encouraged to bundle the fixes for all issues they are addressing in a single update.
3. What do the entries in the Type column mean?
Entries in the Type column of the vulnerability details table reference the classification of the security vulnerability.
Abbreviation Definition RCE Remote code execution EoP Elevation of privilege ID Information disclosure DoS Denial of service N/A Classification not available
4. What do the entries in the References column mean?
Entries under the References column of the vulnerability details table may contain a prefix identifying the organization to which the reference mvalue belongs.
Prefix Reference A- Android bug ID QC- Qualcomm reference number M- MediaTek reference number N- NVIDIA reference number B- Broadcom reference number U- UNISOC reference number
5. What does an * next to the Android bug ID in the References column mean?
Issues that are not publicly available have an * next to the corresponding reference ID. The update for that issue is generally contained in the latest binary drivers for Pixel devices available from the Google Developer site.
6. Why are security vulnerabilities split between this bulletin and device / partner security bulletins, such as the Pixel bulletin?
Security vulnerabilities that are documented in this security bulletin are required to declare the latest security patch level on Android devices. Additional security vulnerabilities that are documented in the device / partner security bulletins are not required for declaring a security patch level. Android device and chipset manufacturers may also publish security vulnerability details specific to their products, such as Google, Huawei, LGE, Motorola, Nokia, or Samsung.
Versions
Version Date Notes 1.0 August 1, 2022 Bulletin Published
Note that this is mainly for the officially listed "Unlocked" Pixel 6 Pro, available directly from the Google Store. All of this will also apply to any other (carrier-specific) variant of the Pixel 6 Pro which you can achieve an unlocked bootloader on. This includes T-Mobile and AT&T variants. It's likely Verizon variants will never be able to unlock their bootloader, or if so it will require paying the right person to do so.
Feel free to ask about general questions, but for anything that's specific to your variant, you should use one of the other already existing threads. You'll find Verizon, AT&T, and T-Mobile-related threads in those respective search results.
Unlocking or locking the bootloader will wipe the device every single time, so be sure to have your data backed up before doing so, or better yet, just unlock it as soon as you get the device.
Keep in mind that unlocking the bootloader or rooting might affect your phone's capability to use banking apps such as Google Pay, your local bank's app, or even the ability to install some apps like NetFlix. See @Pekempy's thread Working SafetyNet with Pixel 6 Pro Android 12
If you're going to re-lock the bootloader, make sure the ROM you have on your phone is completely stock (by flashing the latest official firmware) BEFORE re-locking it.
There are no negative consequences if you unlock or re-lock the bootloader other than it will wipe your phone, and while unlocked you get a brief screen when you boot the phone telling you (and anyone who sees your phone at the time) that the bootloader is unlocked. You will also continue to receive updates (if you've merely unlocked the bootloader, you can take updates as normal) unlike Samsung, Sony, et cetera, which have permanent major consequences with reduced functionality even if you un-root and re-lock your bootloader. If you're actually rooted (not just bootloader unlocked), you'll have to perform extra steps to manually update each month, and to keep root/re-root.
All posts about Google Pay or banking will be reported to be deleted. Please keep this thread on-topic. There are at least one or two other How To Guide threads in this section in which folks discuss how to get around banking app restrictions when you're rooted or just have an unlocked bootloader. See @Pekempy's thread Working SafetyNet with Pixel 6 Pro Android 12
If users persist in discussing banking apps in this thread, I will have this thread locked and only update this first post when there is new and updated information regarding the subjects of the title of the thread: Unlocking the Pixel 6 Pro bootloader, rooting, and TWRP. See @Pekempy's thread Working SafetyNet with Pixel 6 Pro Android 12
Honorable mention to @Jawomo's aodNotify - Notification Light / LED for Pixel 6 Pro! (XDA link) / Notification light / LED for Pixel - aodNotify (Play Store link), which in my opinion restores useful functionality missing in most phones these days. It also solves some subjective issues some folks have with AOD (Always On Display), and/or solves/works around the problem where AOD is required for the optical fingerprint reader to work without the screen being on.
OEM unlocking in developer options needs to be toggled on. I don't "believe" you have to actually do the "fastboot flashing unlock" command.
- You'll need this if you're going to unlock the bootloader on your Pixel 6 Pro: SDK Platform Tools (download links for Windows, Mac, and Linux). Note that you can find links to download the tools elsewhere, but I wouldn't trust them - you never know if they've been modified. Even if the person providing the link didn't do anything intentionally, the tools could be modified without them being aware. Why take a chance of putting your phone security further at risk?
- You can alternately use the tools from the SDK Manager, but most of us will want to stick to the basic tools-only without the complications of the full development manager.
- For Windows, get Google's drivers here Get the Google USB Driver (ADB will likely work while the phone is fully booted, but if you're like me, you'll need these drivers for after you "adb reboot-bootloader", to be able to use ADB and Fastboot.
- Thanks to @96carboard for posting the details of unlocking the bootloader, be sure to thank him in his post. Unlocking or locking the bootloader will wipe the device every single time, so be sure to have your data backed up before doing so, or better yet, just unlock it as soon as you get the device. Keep in mind that unlocking the bootloader or rooting might affect your phone's capability to use banking apps such as Google Pay, or your local bank's app. If you're going to re-lock the bootloader, make sure the ROM you have on your phone is completely stock (by flashing the latest official firmware) BEFORE re-locking it. My experience on my Pixel 1 was that there were no negative consequences if you unlock or re-lock the bootloader other than it will wipe your phone, and while unlocked you get a brief screen when you boot the phone telling you (and anyone who sees your phone at the time) that the bootloader is unlocked. All of this should still be the case. You will also continue to receive updates. Unlike Samsung, Sony, et cetera, which have major consequences with reduced functionality even if you un-root and re-lock your bootloader. If you're actually rooted (not just bootloader unlocked), you'll have to perform extra steps to keep root/re-root.:
The unlock process works like this:
1) Take brand new fresh phone out of box. Do NOT put sim card in it, just power it on (you can put a SIM card if you want, you just don't have to).
2) When it starts harassing you to join Google, hit "skip" and "remind me tomorrow" as applicable until you reach home screen. YOU DO NOT need to plug in a google account.
3) Settings --> About --> Build number. Repeatedly tap it until it says you're a developer.
4) Back --> Network --> WiFi and connect it.
5) Back --> System --> Developer --> OEM unlocking (check), USB debugging (check), plug in USB, authorize on the phone when requested.
Using the Platform Tools previously mentioned in command line/terminal:
6) #7) #Code:adb reboot-bootloader
Code:fastboot flashing unlock
Now that you've unlocked it, it has been wiped, so repeat 1-4, then disable all the google spyware, and go ahead and start using it while waiting for aosp and root.
Official Instructions for Locking/Unlocking the Bootloader
Personally, I would always use the official drivers Google provides unless they just don't work for whatever reason: Get the Google USB Driver (this is for Windows). They work for me. They are rarely updated, but they are every once in a great while, sometimes years in-between.
I agree with this. be careful using drivers or adb/fastboot tools. Some are fine, but there's no need for it really anymore. Google has made it very easy to install drivers and Platform-Tools (adb/fastboot tool).
Google provides the Fastboot/ADB tool (Platform-Tools) and Google USB Drivers (adb/fastboot interface). This will allow any Pixel to interface with Windows using the fastboot/adb protocol. Official Google USB Driver includes support for both the Fastboot and ADB driver interface. There are 3 main drivers (Fastboot, ADB and MTP/Portable File Transfer). The MTP/Portable File Transfer driver is built-in to Windows 7-11.
Fastboot/ADB Driver Interface - Official Download Link:
When flashing a full image or unlocking your bootloader, the fastboot interface is being used.
First Download official Google USB Drivers (it's a zip file). Extract the zip (important!). Right-click on the android_winusb.inf file and hit install. You can then restart your phone to the Bootloader Screen (hold vol-down while it restarts or turns on). When you plug in your phone, Windows Device Manager will show a new device at the top: Android Device: Android Bootloader Interface.
Using the ADB interface: It's the same driver. Enable USB Debugging on your phone, then plug it in to your computer. A prompt will appear on your phone (to allow USB Debugging). The driver in Device Manager will appear as Android Device: Android Composite ADB interface.
Now you can download and use Platform-Tools to flash an Android Image, OTA or run adb/fastboot commands.
Official Download Page
"Android SDK Platform-Tools is a component for the Android SDK. It includes tools that interface with the Android platform, such as adb, fastboot, and systrace"
It's best to make Platform-Tools available system-wide. Download Platform-Tools from the above link and extract it to your C:\ drive - that way you will have a folder to add to the PATH Environment under Window System Properties Menu, Advanced, Environment Variables, System Variables, PATH (google how to do this, very easy). What this does is allow adb/fastboot commands to be run from anywhere in the system, so you don't have to be in the platform-tools folder to run adb/fastboot commands and flash an Android Image (Official or Android Fork such as ProtonAOSP).
@V0latyle posted a new thread with some very important and fascinating information about the increased difficulty to root Android 12: Read this before rooting. Be sure to thank him there.
I would guess that this should be the appropriate URL for official TWRP custom recovery for the Pixel 6 Pro, but who knows when/if that will actually be made available, and it may become available unofficially in these forum sections before being made official. I'll adjust this URL as needed. https://twrp.me/google/googlepixel6pro.html.
@Freak07's Kirisakura-Kernel for the Pixel 6 Pro (and possibly the Pixel 6)
@DespairFactor's Despair Kernel (I believe also for both the P6P and P6)
@tbalden's CleanSlate Kernel
@acuicultor's Radioactive Kernel
It's also handy to have to the full official firmware available, whether it's to recovery from accidents or for actual development. Note the official link to the general Factory Images for Nexus and Pixel Devices page. The following link goes directly to the Pixel 6 Pro (Raven) section: Pixel 6 Pro Factory Images. I prefer to actually bookmark a link to the device listed immediately below the device I want the firmware for, because Google dumbly (in my opinion) puts the latest firmware at the bottom of the list for each particular device, and that ends up making you scroll a lot after a year or two of monthly updates.
Note: You can still get the December 2021 Factory Images and OTA from this thread, if you need them for any reason: Alternate links to December - all full factory images and OTAs available
Back to modding!
- Use the latest Magisk Stable (in my case, I keep the app "hidden" / renamed)
- Used the full firmware zip, extracted to the same folder as the latest Platform Tools (S:\platform-tools)
- Extracted the new boot.img
- Copied new boot.img to the phone
- Patched the new boot.img with Magisk Stable
- Renamed Magisk'd boot.img so I know what version of firmware it's for
- Copied the Magisk'd boot.img back to the computer
- Disabled all my Magisk Modules
- Removed the "-w " from the flash-all.bat
- Re-edited the flash-all.bat to verify I saved it with the "-w " taken out
- Open a Command Prompt, navigated to S:\platform-tools
- adb reboot bootloader
- flash-all.bat
- Let phone boot, unlock it, check that it's working, allow the update process to finish (gave it five minutes or so)
- adb reboot bootloader
- fastboot flash boot kernel.img (renamed Magisk'd boot.img)
- fastboot reboot
- Unlock, check everything's working
- Re-enabled the most basic Magisk Modules which I was sure wouldn't cause a critical issue
- Reboot, unlock, made sure everything's working
I may append these first four posts with further useful information or links as needed.
33.0.1 (March 2022)
- adb
- Fixes Windows mdns crashes.
- Fixes enable-verity/disable-verity on old devices.
- Fixes "install multiple" on old devices
- Improves the help output to include all supported compression methods.
Revisions
32.0.0 (January 2022)
- adb
- Fixed adb w/o args SEGV regression.
- fastboot
- Reinstated recovery execution from b/158156979 (removal of preprocessor guards for root/secure).