Android Zero Day Vulnerability Found to Impact Pixel, Galaxy and Xiaomi Phones

Google'south team of security researchers responsible for reporting nix-twenty-four hours vulnerabilities, known as Project Zero, recently discovered an unpatched exploit in Android that's being used in real-life attacks. This vulnerability affects smartphones from popular OEMs like Samsung, Xiaomi, and Huawei. Even Google's older Pixel phones are impacted besides.

This vulnerability resides in the Android kernel source and was first discovered back in 2017, which is also when it was patched. This included the 4.fourteen LTS kernel, as well every bit AOSP Android 3.18, four.four, and iv.ix kernels, but the vulnerability again popped upwardly in newer versions of Android.

Smartphones running Android 8.0 or later could exist affected by the exploit, which Project Naught says doesn't require per-device customization. This means the hackers tin can attack a ton of different devices using the same malicious technique. They don't crave in-person access to the device and could gain root access simply past making users sideload a malicious app.

Here's the complete list of devices affected past the zero-24-hour interval vulnerability, which is flagged every bit high priority by Google –

• Pixel 1/ Pixel 1 Twoscore
• Pixel 2/ Pixel two XL
• Huawei P20
• Xiaomi Redmi 5A
• Xiaomi Redmi Note 5
• Xiaomi A1
• Oppo A3
• Moto Z3
• Android Oreo LG phones
• Samsung Milky way S7
• Samsung Galaxy S8
• Samsung Milky way S9

Google's Projection Zero team may accept discovered the vulnerability, just it'south the Threat Analysis Grouping (TAG) that confirmed its utilize in real-life attacks on affected devices. It believes the NSO Group, a popular Israeli-based visitor known to sell exploits and surveillance tools, is behind the nothing-day attacks. However, NSO has denied Google's accusations.

The Project Zero team mentions that the aforementioned isn't an exhaustive list and a number of devices take already been exploited using this bug. Google will release the October security patch, which should go far next calendar week, with a fix for this vulnerability. Other OEMs listed above are expected to follow adapt in the coming weeks.

Source: https://beebom.com/android-zero-day-vulnerability-pixel-galaxy-xiaomi/

Posted by: harrisoncarablathe.blogspot.com

Share this post