[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["没有我需要的信息","missingTheInformationINeed","thumb-down"],["太复杂/步骤太多","tooComplicatedTooManySteps","thumb-down"],["内容需要更新","outOfDate","thumb-down"],["翻译问题","translationIssue","thumb-down"],["示例/代码问题","samplesCodeIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-08-07。"],[],[],null,["# Pixel Update Bulletin—September 2023\n\n*Published September 18, 2023*\n\nThe Pixel Update Bulletin contains details of security vulnerabilities and\nfunctional improvements affecting\n[supported Pixel devices](https://support.google.com/pixelphone/answer/4457705#pixel_phones&nexus_devices) (Google\ndevices). For Google devices, security patch levels of 2023-09-01 or later\naddress all issues in this bulletin and all issues in the\nSeptember 2023 Android Security Bulletin. To learn how to check a\ndevice's security patch level, see [Check and update\nyour Android version](https://support.google.com/pixelphone/answer/4457705).\n\nAll supported Google devices will receive an update to the\n2023-09-01 patch level. We encourage all customers to\naccept these updates to their devices.\n| **Note:** The Google device firmware images are available on the [Google\n| Developer site](https://developers.google.com/android/images).\n\nAnnouncements\n-------------\n\n- In addition to the security vulnerabilities described in the September 2023 Android Security Bulletin, Google devices also contain patches for the security vulnerabilities described below.\n\n| **Note**: There are indications that CVE-2023-4211 may be under limited, targeted exploitation.\n\nSecurity patches\n----------------\n\nVulnerabilities are grouped under the component that they affect. There is\na\ndescription of the issue and a table with the CVE, associated references, [type of vulnerability](#type), [severity](/security/overview/updates-resources#severity),\nand updated Android Open Source Project (AOSP) versions (where applicable).\nWhen available, we link the public change that addressed the issue to the bug\nID, like the AOSP change list. When multiple changes relate to a single bug,\nadditional references are linked to numbers following the bug ID.\n\n### Arm components\n\n| CVE | References | | Severity | Subcomponent |\n|---------------|-------------|---|----------|--------------|\n| CVE-2023-4211 | A-294605494 | | High | Mali |\n\nFunctional patches\n------------------\n\nFor details on the new bug fixes and functional patches included in this\nrelease, refer to the [Pixel Community forum](https://support.google.com/pixelphone/thread/235472280).\n\nCommon questions and answers\n----------------------------\n\n\nThis section answers common questions that may occur after reading this\nbulletin.\n\n\n**1. How do I determine if my device is updated to address these\nissues?**\n\nSecurity patch levels of 2023-09-01 or later address all issues associated\nwith the 2023-09-01 security patch level and all previous patch levels.\nTo learn how to check a device's security patch level, read the instructions\non the [Google device update schedule](https://support.google.com/pixelphone/answer/4457705#pixel_phones&nexus_devices).\n\n\n**2. What do the entries in the *Type* column mean?**\n\nEntries in the *Type* column of the vulnerability details table\nreference the classification of the security vulnerability.\n\n| Abbreviation | Definition |\n|--------------|------------------------------|\n| RCE | Remote code execution |\n| EoP | Elevation of privilege |\n| ID | Information disclosure |\n| DoS | Denial of service |\n| N/A | Classification not available |\n\n\n**3. What do the entries in the *References* column mean?**\n\nEntries under the *References* column of the vulnerability details\ntable may contain a prefix identifying the organization to which the\nreference\nvalue belongs.\n\n| Prefix | Reference |\n|--------|---------------------------|\n| A- | Android bug ID |\n| QC- | Qualcomm reference number |\n| M- | MediaTek reference number |\n| N- | NVIDIA reference number |\n| B- | Broadcom reference number |\n| U- | UNISOC reference number |\n\n\n**4. What does an \\* next to the Android bug ID in the *References*\ncolumn mean?**\n\nIssues that are not publicly available have an \\* next to the Android bug ID\nin the *References* column. The update for that issue is generally\ncontained in the latest binary drivers for Pixel devices available from the\n[Google\nDeveloper site](https://developers.google.com/android/drivers).\n\n\n**5. Why are security vulnerabilities split between this bulletin and\nthe\nAndroid Security Bulletins?**\n\nSecurity vulnerabilities that are documented in the Android Security\nBulletins are required to declare the latest security patch level on Android\ndevices. Additional security vulnerabilities, such as those documented in\nthis\nbulletin are not required for declaring a security patch level.\n\nVersions\n--------\n\n| Version | Date | Notes |\n|---------|--------------------|-------|\n| 1.0 | September 18, 2023 | |"]]
