Opening this image file grants hackers access to your Android phone

10 February, 2019, 19:17 | Author: Sammy Rose
  • New Android Bug Can Let Hackers Attack Phone With PNG Image File

This is how Google describes it, saying in its February Android 2019 security patch notes, "The most severe of these issues is a critical security vulnerability in Framework that could allow a remote attacker using a specially crafted PNG file to execute arbitrary code within the context of a privileged process".

Hackers could sneak their way inside any Android phone or tablet by sending a malicious image file, according to the latest Android security bulletin released by Google. Well, the good part of Android security bulletin is that Google has not received any reports of anyone exploiting the vulnerability as of now and has patched the issues with an upgrade to Android in the form of a security patch. However, given the ease in which the bug can be exploited, users should accept incoming updates to their Android builds as soon as possible. The severity assessment is based on the effect that exploiting the vulnerability would possibly have on an affected device, assuming the platform and service mitigations are turned off for development purposes or if successfully bypassed.

A major flaw in Android's framework allows an attacker to execute computer code remotely by using a maliciously crafted PNG image file to smuggle the code.

'Child's Play' Reboot Trailer Teases a Murderous Chucky Robot Doll
Jennifer Tilly , who voiced Chucky's bride Tiffany Valentine, will not be returning to the role. And although you never see the doll, he looks quite different than in Mancini's films.


Is Kylie Jenner Engaged & Pregnant? Kendall Says…
She asked whether or not Kylie had gotten engaged after the Super Bowl , to which Jenner said she didn't think so. There's nothing long-term or serious like that in my life", she told Harper's Bazaar in 2017.


Facility where incapacitated woman gave birth to shut down
Sutherland was a licensed practical nurse who surrendered his license after his arrest, and he has pleaded not guilty in court. On Jan. 21, one of the doctors responsible for the care of the woman who was raped was suspended while the other resigned.


Besides the three flaws, Google also included fixes for 42 vulnerabilities in the Android OS in total in its 2019 February update, of which 11 are considered as critical, 30 high impact and one medium-gravity.

Unfortunately, it is unknown when third-party handset manufacturers will roll out the security updates on their phones, as many of them take weeks, if not months, to do roll them out.

Google says it offers the monthly security patch to its OEM partners at least a month in advance but we have not heard from smartphone makers as to when then plan to release security patch for their devices. So you won't be protected until your Android handset receives the 2019 February update. Several old devices will also not receive the update at all.

Recommended:



Popular

New Zealand beat India by four runs in third T20, take series
In what was the only change for India , they swapped their wrist-spinner including Kuldeep Yadav in place of Yuzvendra Chahal. Dinesh Karthik and Krunal Pandya were only able to take 11 runs off it, with Karthik's six from the final ball in vain.

Kate Miller-Heidke to represent Australia at Eurovision Song Contest 2019
Among the eight entries competing on Saturday, the TOP 3 were MARUV , Brunettes Shoot Blondes , and YUKO . It is the first time the public has helped choose the musical act to perform at the contest.

Beamdog Teams with Skybound to Publish Infinity Engine Games for Consoles
Today, Baldur's Gate is a series of role-playing games set in the Dungeons & Dragons universe. Read the full press announcement on the SkyBound Games site .

January unemployment up from December, drops from start of 2018
They do not inherently or expressly reflect the views, opinions and/or positions of our publication. Over the same period, there was little change in the number of self-employed workers".

Vivo V15 Pro’s 32MP Front Pop-Up Snapper Teased In New Video
Vivo V15 Pro comes with the world's first 32-megapixel selfie camera which will be a pop-out snapper like the Vivo Nex . More info will probably leak soon regarding this phone, as its launch event is nearly two weeks away at this point.

Acting US attorney general snaps at Democrats over Russia probe
The hearing took place as Trump's nomination of former Attorney General William Barr is making its way through the Senate. Chairman, I see that your five minutes are up, " Whitaker said to the committee's Democratic leader, Rep.

Australia parliament hit by cyber-hack attempt
An investigation by Parliament blamed users' poor password choices for the breaches (see: Parliament's Email Practices Probed by Privacy Watchdog ).

PSG 1-0 Bordeaux: Edinson Cavani injured days before Manchester United game
As a result, Mbappe started on the bench while Angel di Maria , Marquinhos, Juan Bernat, Thilo Kehrer and Julian Draxler - all probable starters in midweek - were left out completely.

Krunal Pandya destroys Kiwis, as India win second T20!
Opener Tim Seifert took the Indian bowlers to cleaners with a 43-ball 84 and visitors must have a plan to contain him on Friday. They might think of Kuldeep Yadav but it is highly unlikely that Rohit Sharma will tinker with the winning combination.

Valerie Reyes, Greenwich murder victim, described as 'homebody' and 'most gentle girl'
Greenwich residents spoke with the local newspaper, the Greenwich Time , about a growing uneasiness over news of the killing. Please contact me if you have any information or if you might have seen her, ' Angie wrote in the post. "Horrified.