Google has found about 40 security vulnerabilities affecting Android devices. Of these 40 flaws, 6 were identified as 'critical flaws' and 12 were rated as very serious. Google has released patches for all 40 flaws.
There are various types of flaws that affect Android devices, such as remote code execution, elevated privilege, and remote denial of service attack (DOS).
The most serious vulnerabilities (CVE-2016-2428 and CVE-2016-2429) are these two, which mainly affect media processing files. The flaw allows malicious users to remotely execute code when the device receives a malicious email or MMS and the user visits the infected page.
[su_button url=”https://www.secnews.gr/103712/7-apps-to-encrypt-your-chats/” target=”blank” style=”glass” background=”#0cfb5a” color=”#1515157″ wide=”yes” center=”yes” radius=”20″ icon_color=”#ffffff”]Read more: Choose one of the 7 most secure Apps & encrypt your Chats![/su_button]
Google has created a bulletin group in which ratings for Android devices are announced, but now this bulletin has been expanded and is known as a 'security bulletin'.
The tech giant is trying to close security holes, but the truth is that it is often not that easy, since security holes are increasing and finding patches for each one becomes a 'headache' for the company's security experts.
Zuk Avraham, the founder and CTO of Zimperium, recently stated that Google continues to find new vulnerabilities in Android month after month.
The vulnerabilities were discovered by Andy Tyler of e2e-assure, Hao Chen of Qihoo 360 Technology Co. Ltd, Jake Valletta of Mandiant; Jianqiang Zhao, Imre Rad of Search-Lab Ltd.; Marco Grassi of KeenLab, Mingjian Zhou, Yuan-Tsung Lo, Lubo Zhang, Chiachih Wu, Peter Pi of Trend Micro; Weichao Sun of Alibaba Inc.; Yulong Zhang and Tao (Lenx) Wei of Baidu X-Lab; Zach Riggle of the Android Security team, Jeremy C. Joslin and Kenny Root of Google; Abhishek Arya, Oliver Chang, and Martin Barbella of the Google Chrome security team; and independent researchers Dzmitry Lukyanenka, Gal Benjamin, and Michał Bednarski.
[su_button url=”https://www.secnews.gr/103303/viber-kruptografisi-end-to-end/” target=”blank” style=”glass” background=”#d60cfb” color=”#1515157″ wide=”yes” center=”yes” radius=”20″ icon_color=”#ffffff”]See more: And Viber adds end-to-end encryption![/su_button]
