Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Zero-Day Used in the Wild Impacts Pixel 2, Other Android Phones
#1
Exclamation 
Quote:Fully patched Pixel 2 devices, even those running Android 10 preview, are impacted by a vulnerability that has already been abused in attacks, a Google Project Zero security researcher has discovered.
 
The issue, tracked as CVE-2019-2215, is a use-after-free in the binder driver that could result in an exploitable crash, Project Zero researcher Maddie Stone reveals.
 
The flaw was discovered during code review on a Pixel 2 with the most recent security patches, but was previously addressed in December 2017 in the 4.14 Linux kernel, the Android Open Source Project (AOSP) 3.18 kernel, AOSP 4.4 kernel, and AOSP 4.9 kernel.
 
In addition to Pixel 2 with Android 9 and Android 10 preview, source code review also revealed additional devices that are vulnerable, including Huawei P20; Xiaomi Redmi 5A, Redmi Note 5, and A1; Oppo A3; Motorola Moto Z3; LG phones running Android 8 Oreo; and Samsung Galaxy S7, S8 and S9.

Read more here: https://www.securityweek.com/zero-day-us...oid-phones
[-] The following 1 user Likes silversurfer's post:
  • harlan4096
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Recent Posts
Zoom won't encrypt free calls so it can ...
Communications com...Toligo — 21:11
California blocks bill that could’ve led...
As images of polic...Toligo — 21:09
Pentagon intelligence employees raise co...
WASHINGTON — The g...Toligo — 21:07
[Giveaway] SoftOrbits Easy Photo Unblur...
Easy Photo Unblur v ...ismail — 17:57
TwistedBrush Pro Studio 22.03
TwistedBrush Pro Stu...ismail — 17:56

[-]
Birthdays
Today's Birthdays
avatar (42)BrantgoG
Upcoming Birthdays
avatar (43)rapedDow
avatar (38)Johnsonsyday
avatar (43)Groktus
avatar (35)efodo
avatar (33)Tedscolo
avatar (40)brakasig
avatar (39)JamesReshy
avatar (41)Francisemefe
avatar (34)leoniDup
avatar (33)Patrizaancem
avatar (45)smudloquask
avatar (40)benchJem
avatar (33)biobdam
avatar (36)zacforat
avatar (41)NemrokReks
avatar (32)Barrackleve
avatar (34)Julioagopy
avatar (42)vadimTob
avatar (32)leannauu4
avatar (34)storoBox
avatar (42)kinotHeemn
avatar (34)efynu

[-]
Online Staff
There are no staff members currently online.

>