Multiple Vulnerabilities in Google Android OS Could Allow for Remote Code Execution

Multiple critical and lower-severity vulnerabilities in Google Android OS were disclosed, including several System CVEs enabling remote code execution, Framework and Kernel CVEs enabling privilege escalation, and numerous information-disclosure and denial-of-service issues across Framework, System, Kernel, Google Play updates, and vendor components (MediaTek, Qualcomm). The advisory correlates exploitation paths to MITRE ATT&CK techniques (Exploitation for Client Execution T1203 and Exploitation for Privilege Escalation T1068) and provides a list of affected CVE identifiers.