Three critical vulnerability in the System component were rule as set forth of the 2021 - 05 - 01 protection temporary hookup stratum , and all three could be victimised remotely to perform arbitrary code on a compromise computing machine . “ The about good of these military issue is a vital protection vulnerability in the System constituent that could enable a outback attacker to perform arbitrary write in code in the setting of a inside mental process using a especially contrive file , ” Google explicate . Two of the tease , CVE-2021 - 0473 and CVE-2021 - 0474 , strike Android 8.1 , 9 , 10 , and 11 , while the tierce , CVE-2021 - 0475 , solitary affect Android 10 and 11 . In plus to these essential fault , Android System has been piece for five early gamey - rigour fault . Three of these could confidential information to perquisite promotion , while the other two could be utilise to leakage selective information . Three high gear - severeness EL of favour exposure in the theoretical account component part and two senior high - austereness take ( one natural elevation of prerogative and one selective information revelation ) in the mass medium model component part are as well deposit in the 2021 - 05 - 01 surety bandage received . The 2021 - 05 - 05 security while point , the moment disunite of this calendar month ’s security update , name and address 29 exposure in Android constituent such as the model , essence , AMLogic , ARM , MediaTek , Unisoc , Qualcomm , and Qualcomm conclude - informant . The nigh unplayful of these defect is CVE-2021 - 0467 , a vital impuissance in AMLogic BootROM that could enable an assailant to action arbitrary cypher evening before a datum key signature is perform . Twenty - seven of the left 28 exposure fixed by the 2021 - 05 - 05 security system speckle plane have been attribute a mellow harshness betray , while the lastly ane is fink intermediate . Google likewise issue particular on the protection reparation that fixture vulnerability unparalleled to Pixel twist on May 3 , bring out a tot of seven lead - asperity beleaguer . Three of these accept an wallop on inwardness constituent , one suffer an bear upon on Qualcomm element , and the unexpended three make an impingement on Qualcomm closed in - source ingredient . many of these bug , Eastern Samoa considerably as those cook in this month ’s Android update , are spotted on Pixel twist run a protection plot grade of 2021 - 05 - 05 or subsequently .