In keeping with their promise to make Android more secure on a monthly basis, Google’s December 2015 Security Bulletin had been posted, detailing the next update and what was addressed that time around. According to Google, partners were notified and provided updates for the December list on November 2nd. This update is marked December 1, 2015 on phones that mark security updates in settings.
As far as what Google have addressed in this issue, there are a total of sixteen “Common Vulnerability and Exposures” that have been identified and resolved with this update. Google’s security bulletin reports that there are no reports of any active exploits through these vulnerabilities, which were discovered by eleven individuals. Four of these individuals work for the Google Chrome Security Team (also known as Project Zero). Most of the security issues concern the mediaserver code including privilege elevation within the Stagefright library.
The table below contains a list of security vulnerabilities, the Common Vulnerability and Exposures ID (CVE), and their assessed severity.