April 2021s Android security bulletin published by Google describes more than 30 vulnerabilities in the mobile OS, including a remote code execution flaw in the System component.
The critical security vulnerability in the System component that could enable a remote attacker using a specially crafted file to execute arbitrary code within the context of a privileged process.