4 ms·
Are you sure about biggest Android exploit? Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a
by woobar 3y ago
Are you sure about biggest Android exploit?
Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require only that the attacker know the victim's phone number. [1]
[1] https://googleprojectzero.blogspot.com/2023/03/multiple-internet-to-baseband-remote-rce.html https://googleprojectzero.blogspot.com/2023/03/multiple-inte...
- charcircuit 3y agoDo you have evidence Pegasus used this?
- Xeamek 3y agoTo be exact, those aren't exploits of android itself, just the device it's running on. Not much of a difference in the outcome, but i guess it doesn't defeat the argument of google having good platform
- woobar 3y agoThis is a recent one. Whatsapp bug [1] exposed both Android and iOS few years back. And then there was MMS exploit [2] that affected close to 95% of android phones [1] https://www.ft.com/content/4da1117e-756c-11e9-be7d-6d846537acab https://www.ft.com/content/4da1117e-756c-11e9-be7d-6d846537a... [2] https://en.wikipedia.org/wiki/Stagefright_(bug) https://en.wikipedia.org/wiki/Stagefright_(bug)
- arsome 3y agoWhile Stagefright "affected" them, it often wasn't exploitable. Not to mention that was 5+ years ago and they've since sandboxed all codecs, mitigating potential threats from that vector in the future.