An anonymous reader quotes a report from ZDNet: Google has patched this week a critical security flaw in Android’s Bluetooth component. If left unpatched, the vulnerability can be exploited without any user interaction and can even be used to create self-spreading Bluetooth worms. Researchers said that exploiting the bug requires no user interaction. All that is required is that the user has Bluetooth enabled on his device. However, while this requirement would have limited the attack surface in past years, it does not today since modern Android OS versions ship with Bluetooth enabled by default and many Android users use Bluetooth-based headphones meaning the Bluetooth service is likely to be enabled on many handsets. The bug can lead to remote code execution and the hijacking of a device. Fixes for the bug are available via the Android February 2020 Security Bulletin, which has been available for download starting this week. Android 9 and earlier are impacted.
Sujets connexes
| Sujet | Réponses | Vues | Activité | |
|---|---|---|---|---|
| Samsung's Changes To Android Are Making Its Phones Less Secure, Says Google | 0 | 677 | Février 17, 2020 | |
| Google Patched an Actively-Exploited Zero-Day Bug in Chrome | 0 | 838 | Octobre 25, 2020 | |
| Google To Put a Muzzle on Android Apps Accessing Location Data in the Background | 0 | 613 | Février 21, 2020 | |
| Google Is Building a Special Android Security Team to Hunt Bugs in Sensitive Apps | 0 | 689 | Octobre 4, 2020 | |
| Android 10 Had the Fastest Adoption Rate of Any Version of Android Yet | 0 | 585 | Juillet 11, 2020 | |
| OpenWRT Code-Execution Bug Puts Millions of Devices At Risk | 0 | 698 | Avril 1, 2020 | |
| Google Extends Linux Kernel Support To Keep Android Devices Secure For Longer | 0 | 68 | Juillet 8, 2024 | |
| Snapdragon Digital Signal Processor unit has a major vulnerability, threatening a large number of Android devices | 0 | 666 | Août 10, 2020 |
!