Google today pushed out a security update to devices running Android 6.0 Marshmallow.
Google said the most urgent issue pertained to “a critical security vulnerability that could enable remote code execution on an affected device through multiple methods such as email, web browsing, and MMS when processing media files.”
Google says, to its knowledge, none of these weaknesses have been exploited. Google alerted its handset partners about the vulnerability on October 5 and will issue an update to the AOSP variant of Android in the next 48 hours.
Devices with Android builds LMY48X and higher will show an Android security patch date of November 1
