Google says Google and different Android producers have not patched safety flaws

By
admin
-
0
55

[ad_1]

Google has disclosed a number of safety flaws for telephones which have Mali GPUs, reminiscent of these with Exynos chipsets. The corporate’s Challenge Zero workforce says it flagged the issues to ARM (which produces the GPUs) again in the summertime. ARM resolved the problems on its finish in July and August. Nonetheless, smartphone producers together with Samsung, Xiaomi, Oppo and Google itself hadn’t deployed patches to repair the vulnerabilities as of earlier this week, Challenge Zero mentioned.
Researchers recognized 5 new points in June and July and promptly flagged them to ARM. “One in every of these points led to kernel reminiscence corruption, one led to bodily reminiscence addresses being disclosed to userspace and the remaining three led to a bodily web page use-after-free situation,” Challenge Zero’s Ian Beer wrote in a weblog publish. “These would allow an attacker to proceed to learn and write bodily pages after they’d been returned to the system.”
Beer famous that it might be potential for a hacker to realize full entry to a system as they’d have the ability to bypass the permissions mannequin on Android and acquire “broad entry” to a person’s information. The attacker might achieve this by forcing the kernel to reuse the afore-mentioned bodily pages as web page tables.
Challenge Zero discovered that, three months after ARM mounted these points, the entire workforce’s take a look at gadgets had been nonetheless susceptible to the issues. As of Tuesday, the problems weren’t talked about “in any downstream safety bulletins” from Android producers.
Engadget has contacted Google, Samsung, Oppo and Xiaomi to ask when they are going to deploy the fixes to their Android gadgets and why it has taken so lengthy for them to take action. As SamMobile notes, Samsung’s Galaxy S22 sequence gadgets and the corporate’s Snapdragon-powered handsets aren’t affected by these vulnerabilities.All merchandise really helpful by Engadget are chosen by our editorial workforce, unbiased of our father or mother firm. A few of our tales embrace affiliate hyperlinks. When you purchase one thing by one in every of these hyperlinks, we could earn an affiliate fee. All costs are right on the time of publishing.

[ad_2]