Unpatched 0-Day Android Vulnerability
Summary
Having been notified back in March, Google has yet to patch a 0-day vulnerability that allows for privilege escalation attacks. In order to exploit this vulnerability, attackers must first obtain the ability to execute high-privileged code and would need local access to the Android device. How the vulnerability is exploited is by not validating an input objects existence prior to operating on it. Let’s put it this way: obtaining the ability to do anything as the kernel basically allows unrestricted access to a device. Only the clients and servers that have a legitimate procedural relationship with the service should be permitted to communicate with it.” On that same note, ensure you only install apps from the Google Play Store and that you’re on the lookout for odd permission requests.
Classifications
AskAI Classifications
LabelsLinked Companies
