Google splats device-hijacking exploited-in-the-wild Android kernel bug among others

Google's August Android security bulletin fixes 46 issues, most notably CVE-2024-36971, a Linux-kernel networking-stack use-after-free (CVSS 7.8) that can enable remote code execution with system privileges and is reported to be under limited targeted exploitation—likely by commercial surveillance/spyware operators tracked by Google TAG. The bulletin also covers a critical Qualcomm multi-mode call processor bug (CVE-2024-23350) that can cause permanent denial-of-service and several high-severity elevation-of-privilege vulnerabilities in the Android Framework; users are urged to apply updates promptly.