Google Samsung Devices Successfully Manipulated Android Zero Day Impacts Cybers Guards
This zero-day is a local privilege (LPE) kernel bug using an Android binder driver application-free flaw, which potential attackers can exploit to gain full control of unspatched apps. “If the exploit arrives on the internet, only a rendering exploit must be combined as this vulnerability can be accessed through the sandbox,” said Google Zero Researcher Maddie Stone, the project’s researcher. Although the problem had previously been patched in 4.14 LTS kernels without a CVE in December 2017 and the Android Open Source (AOSP) kernels of Android 3....