News, currency prices, sports news, art news, world news

Android fans have warned of a serious security vulnerability as Google detects whether your phone will be hit

0 4,015,570

The Mountain View firm discovered what is known as a zero-day that could allow an attacker to gain root access to a device.

Google said a number of popular Android devices are affected, leaving millions at risk.

If you are worried that you could be hit by the bug here’s a full list of phones that are thought to be vulnerable.
The vulnerability itself can be exploited from Android’s kernel code, the core of the popular operating system.

Google’s Threat Analysis Group (TAG) has attributed the software vulnerability to the NSO Group, an Israeli technology company focused on cyber intelligence. Express.co.uk has asked the NSO Group to comment on the matter.

Thankfully, the American tech powerhouse has said the flaw requires a user to install a “malicious application” on their device for it to be exploited.

This means a device cannot be targeted unless the user actively downloads a particular programme.
Moreover, Google has also said Android’s forthcoming October 2019 security patch should fix the newly discovered zero-day. These updates usually roll out for Pixel devices towards the start of each month before they gradually release for mobiles from other vendors.

The Mountain View firm said: “This issue is rated as High severity on Android and by itself requires installation of a malicious application for potential exploitation.

“Any other vectors, such as via web browser, require chaining with an additional exploit. We have notified Android partners and the patch is available on the Android Common Kernel.

“Pixel 3 and 3a devices are not vulnerable while Pixel 1 and 2 devices will be receiving updates for this issue as part of the October update.”

Leave A Reply

Your email address will not be published.