Google rebuilt a core part of Android to kill the Stagefright vulnerability for good

Last summer, researchers discovered a serious problem at the core of Android. There was a flaw in the way Android handled media, potentially allowing remote code execution before a malicious file had even been opened.

Android’s security team patched the initial bug within weeks, but it inspired a wave of new attacks on the way Android processes audio and video files. The first copycat bugs were reported just days after the first patch, with more serious exploits arriving months later. The most recent Android patch report, released today, patches three separate vulnerabilities in Android’s media-processing function, including one critical flaw that could be used for remote code execution.

Continue reading…

Google rebuilt a core part of Android to kill the Stagefright vulnerability for good
Read More