Opening this image file grants hackers access to your Android phone

10 February, 2019, 19:17 | Author: Sammy Rose
  • Hackers can hack an Android smartphone just by looking at a PNG image

This is how Google describes it, saying in its February Android 2019 security patch notes, "The most severe of these issues is a critical security vulnerability in Framework that could allow a remote attacker using a specially crafted PNG file to execute arbitrary code within the context of a privileged process".

Hackers could sneak their way inside any Android phone or tablet by sending a malicious image file, according to the latest Android security bulletin released by Google. Well, the good part of Android security bulletin is that Google has not received any reports of anyone exploiting the vulnerability as of now and has patched the issues with an upgrade to Android in the form of a security patch. However, given the ease in which the bug can be exploited, users should accept incoming updates to their Android builds as soon as possible. The severity assessment is based on the effect that exploiting the vulnerability would possibly have on an affected device, assuming the platform and service mitigations are turned off for development purposes or if successfully bypassed.

A major flaw in Android's framework allows an attacker to execute computer code remotely by using a maliciously crafted PNG image file to smuggle the code.

Beamdog Teams with Skybound to Publish Infinity Engine Games for Consoles
Today, Baldur's Gate is a series of role-playing games set in the Dungeons & Dragons universe. Read the full press announcement on the SkyBound Games site .


Fire extinguished at automated complex of Britain's Ocado
Ocado stressed it has comprehensive insurance for the property, stock and equipment and for business interruption losses. An exclusion zone has been lifted but firefighters may take another few days to extinguish the blaze fully.


Australia parliament hit by cyber-hack attempt
An investigation by Parliament blamed users' poor password choices for the breaches (see: Parliament's Email Practices Probed by Privacy Watchdog ).


Besides the three flaws, Google also included fixes for 42 vulnerabilities in the Android OS in total in its 2019 February update, of which 11 are considered as critical, 30 high impact and one medium-gravity.

Unfortunately, it is unknown when third-party handset manufacturers will roll out the security updates on their phones, as many of them take weeks, if not months, to do roll them out.

Google says it offers the monthly security patch to its OEM partners at least a month in advance but we have not heard from smartphone makers as to when then plan to release security patch for their devices. So you won't be protected until your Android handset receives the 2019 February update. Several old devices will also not receive the update at all.

Recommended:

  • Clippers rally from 28-point deficit to beat Celtics

    Clippers rally from 28-point deficit to beat Celtics

    Irving had 14 points in as many minutes before leaving, making his only 3-point attempt and all five free throws. After Tatum hit a 3, Beverley answered, and then Harrell poked another ball free to preserve the lead.
    Vivo V15 Pro’s 32MP Front Pop-Up Snapper Teased In New Video

    Vivo V15 Pro’s 32MP Front Pop-Up Snapper Teased In New Video

    Vivo V15 Pro comes with the world's first 32-megapixel selfie camera which will be a pop-out snapper like the Vivo Nex . More info will probably leak soon regarding this phone, as its launch event is nearly two weeks away at this point.
    Trump Says Summit With Xi 'Unlikely' by Tariff Deadline Date

    Trump Says Summit With Xi 'Unlikely' by Tariff Deadline Date

    "No final deal will be made until my friend President Xi, and I, meet in the near future", Trump tweeted on January 31. The 2 countries remain far apart on issues such as China's alleged violation of intellectual property rights.
  • Mueller eyes Manafort meeting with Russian partner in 2016 -court filing

    Mueller eyes Manafort meeting with Russian partner in 2016 -court filing

    He also was convicted by a jury in August in a separate federal case in Virginia for bank and tax fraud crimes. But that portion of Weissmann's testimony is redacted in the public transcripts.
    Emiliano Sala: family of missing pilot launch fundraiser to continue search

    Emiliano Sala: family of missing pilot launch fundraiser to continue search

    Sala's sister Romina said of him: "Your soul in my soul, it will shine for ever, thus illuminating the time of my existence". But David Ibbotson, from Crowle, who was lying Sala to the United Kingdom to join Cardiff City , has not been found.
    Officials say man shot at border is alive

    Officials say man shot at border is alive

    Officials reported the total value of the contraband to be an estimated $14,152.000, according to a media release issued by U.S. The Nogales City Council is decrying the installation of new razor fencing that now covers a border fence through downtown.
  • Kanye West Falls Victim to a New York Fashion Week Forgery Scam

    Kanye West Falls Victim to a New York Fashion Week Forgery Scam

    Six children from the foundation were also expected to appear at the high-brow event, wearing Philipp Plein head to toe. This will be Plein's first show in 11 years and he is known for having high-profile celebrities perform at his shows.
    Florida man dances through DUI sobriety test

    Florida man dances through DUI sobriety test

    The vehicle started to roll forward, and the deputy had to jump inside and put on the brakes to stop it from hitting the gate. At one point in the tests, Larson was instructed to walk heel-to-toe across a piece of tape stretched out on the ground.
    Krunal Pandya destroys Kiwis, as India win second T20!

    Krunal Pandya destroys Kiwis, as India win second T20!

    Opener Tim Seifert took the Indian bowlers to cleaners with a 43-ball 84 and visitors must have a plan to contain him on Friday. They might think of Kuldeep Yadav but it is highly unlikely that Rohit Sharma will tinker with the winning combination.
  • Year-old with cancer sworn in as Freeport TX cop

    Year-old with cancer sworn in as Freeport TX cop

    Abigail stood on a stepladder as she raised her right hand to join the police department in Freeport. "Extremely tough. Abigail thought up a good way to combat what she calls "the bad guys" in her body that are making her sick.
    Fortnite Share The Love Event - Overtime Challenges & Rewards, Double XP Weekend & Competitive

    Fortnite Share The Love Event - Overtime Challenges & Rewards, Double XP Weekend & Competitive

    There will also be a special " Share the Love " competitive series, with placement matches running across February 9th and 10th. Look out for special sprays related to the "Share the Love" Competitive Series for each division of the competition! .
    Dallas Mavs Traded Harrison Barnes To Sacramento Kings Mid-Game

    Dallas Mavs Traded Harrison Barnes To Sacramento Kings Mid-Game

    For Barnes, Sacramento sent the Mavericks Justin Jackson and Zach Randolph as reported by ESPN's trade guru Adrian Wojnarowski. The Kings have been in the playoff hunt, surprisingly, all season long. "Everybody else would have bounced out".


Popular

Kate Miller-Heidke to represent Australia at Eurovision Song Contest 2019
Among the eight entries competing on Saturday, the TOP 3 were MARUV , Brunettes Shoot Blondes , and YUKO . It is the first time the public has helped choose the musical act to perform at the contest.

Groom accused of sexually assaulting server, starting fights at his wedding reception
Aimers was released on Wednesday, Feb. 6 after posting 10 percent of his $350,000 bail, The Philadelphia Inquirer reported . Officers tried to apprehend Aimers, but boarded a country club shuttle bus in a futile attempt to escape.

January unemployment up from December, drops from start of 2018
They do not inherently or expressly reflect the views, opinions and/or positions of our publication. Over the same period, there was little change in the number of self-employed workers".

UEFA to launch its own streaming service: Ceferin
While long-standing UEFA-FIFA tensions have continued with these leaders, both first elected in 2016, Ceferin spoke warmly of another ally.

Trump's Claim GOP Never Investigated Obama Gets Backlash
President Trump took to Twitter on Friday to try to undercut House Intelligence Committee Chairman Adam B. President Trump has derided Rep.

Important: M&S is selling a heart-shaped sausage for Valentine's Day
In the advertisement, M&S has carefully fried eggs in the middle of the Love Sausage , which could be the flawless breakfast in bed on the official day of love.

Is Kylie Jenner Engaged & Pregnant? Kendall Says…
She asked whether or not Kylie had gotten engaged after the Super Bowl , to which Jenner said she didn't think so. There's nothing long-term or serious like that in my life", she told Harper's Bazaar in 2017.

PSG 1-0 Bordeaux: Edinson Cavani injured days before Manchester United game
As a result, Mbappe started on the bench while Angel di Maria , Marquinhos, Juan Bernat, Thilo Kehrer and Julian Draxler - all probable starters in midweek - were left out completely.

Facility where incapacitated woman gave birth to shut down
Sutherland was a licensed practical nurse who surrendered his license after his arrest, and he has pleaded not guilty in court. On Jan. 21, one of the doctors responsible for the care of the woman who was raped was suspended while the other resigned.

Valerie Reyes, Greenwich murder victim, described as 'homebody' and 'most gentle girl'
Greenwich residents spoke with the local newspaper, the Greenwich Time , about a growing uneasiness over news of the killing. Please contact me if you have any information or if you might have seen her, ' Angie wrote in the post. "Horrified.