Android 17 QPR2 Beta 4 Released for Google Pixel With Bug Fixes and Security Updates
Android 17 QPR2 Beta 4 Rolled Out for Google Pixel: Security Mitigations and Platform Fixes
Google has officially deployed Android 17 QPR2 Beta 4, carrying build number CP41.260814.003, for eligible Google Pixel devices enrolled in the Android Beta Program, according to reporting from Nokiapoweruser. As development ramps up ahead of the stable December release, this iteration focuses heavily on closing exploitation vectors for social engineering scams and resolving persistent platform bugs across 19 supported models.
The Tech TL;DR:
- Deployment Scope: Delivered via OTA to 19 Pixel models ranging from the Pixel 6a up to the Pixel 9 series, alongside the Pixel Fold and Pixel Tablet, while excluding the newer Pixel 11 lineup and the legacy Pixel 6 and 6 Pro.
- Security Hardening: Restricts background programmatic USSD requests to stop unauthorized call-forwarding exploits, introducing mandatory system-level confirmations for commands like *21# (Nokiapoweruser).
- Stability Fixes: Resolves 16 core system bugs, including microphone audio lockups during screen recording, thermal throttling reboots, and Bluetooth audio routing failures.
Addressing Social Engineering Exploits and USSD Limitations
The standout security enhancement in Android 17 QPR2 Beta 4 targets malicious applications attempting to execute silent carrier-level commands. According to Nokiapoweruser, the operating system now restricts apps from running background programmatic USSD requests, such as call-forwarding codes like 21, using basic phone permissions alone. Developers managing call setup flows must now implement the standard dialer intent via ACTION_DIAL, forcing an explicit, user-facing confirmation dialog before any command executes.
This architectural lockdown prevents background malware from silently intercepting voice traffic.
Under-the-Hood Bug Fixes and Thermal Management Patches
Thermal management issues that previously triggered random device restarts during heavy workloads have been patched. Furthermore, the update resolves a resource lock in the audio service during screen recording, which previously rendered the microphone unusable for applications like Gboard and Gemini until a full system reboot.
Bluetooth audio routing failures—where call audio defaulted to internal device speakers instead of connected headsets—have also been corrected. For developers working with external peripherals, the release fixes screen rendering crashes when connecting USB-C XR smart glasses and eliminates WebGL freeze bugs linked to invalid memory reads within the PowerVR GPU driver texture state handling.
// Example: Implementing the mandated ACTION_DIAL intent for call setup flows
Intent dialIntent = new Intent(Intent.ACTION_DIAL);
dialIntent.setData(Uri.parse("tel:" + Uri.encode(phoneNumber)));
if (dialIntent.resolveActivity(getPackageManager()) != null) {
startActivity(dialIntent);
}
Platform Foundation and Deployment Specifications
Operating under build numbers CP41.260814.003.A2 and CP41.260814.003.B1 with the August 5, 2026 security patch, the release integrates with Google Play Services version 26.28.33. Under the hood, Android 17 continues to lay foundations for post-quantum cryptography with quantum-resistant algorithms integrated into the Android Keystore, default certificate transparency enforcing strict network logging, and hardened background memory limits.
Eligible users can pull the update immediately via Settings > System > System update if enrolled in the pre-release trial. Advanced developers can flash official factory images via the Android Developers portal.