Google has released a security patch for Android devices to resolve 21 different issues, of which 6 are considered critical.
Google said a number of the vulnerabilities could lead to remote code execution via files accessed through Qualcomm media drivers.
To date, none of the vulnerabilities have been exploited. The company will make a new build of Android containing the patch available to the Android Open Source Project and to Nexus-branded handsets and tablets over the next few days.
Google said it alerted its handset partners about the vulnerabilities on May 2, but it is up to individual phone manufacturers and their carrier partners to provide handset updates.
