Google has fixed a dozen security flaws in its Android devices, including five that are deemed critical.

Virtually all modern devices running Android are affected by at least one of the critical flaws. Google said one nasty flaw could allow an attacker to remotely execute code -- such as malware -- by exploiting a flaw in how Android processes some media files.

Those devices include Android 5.0 and higher as well as Marshmallow 6.0. The "mediaserver" service remains the most problematic component of Android. It has been an ongoing flaw for Android. It is listed as one of the critical flaws month after month.

The critical vulnerability affects a core part of the Android software, which has access to permissions that third-party apps cannot normally access.

The first devices to get the updates will be Nexus, while Samsung, LG and BlackBerry will be updated in the next few days.

Source: ZDNet