#1
|
||||
|
||||
ALAC bug left millions of Android devices vulnerable to takeover
ALAC bug left millions of Android devices vulnerable to takeover
A bug in the Apple Lossless Audio Codec (ALAC) impacts two-thirds of Android devices sold in 2021, leaving unpatched devices vulnerable to takeover. ALAC is an audio format developed by Apple for use in iTunes in 2004, providing lossless data compression. After Apple open-sourced the format in 2011, companies worldwide adopted it. Unfortunately, as Check Point Research points out, while Apple has updated its own version of ALAC over the years, the open source version was not updated with security fixes since it was made available in 2011. As a result, an unpatched vulnerability was included in chipsets made by Qualcomm and Mediatek. See also: Lossless music streaming According to Check Point Research, both Mediatek and Qualcomm included the compromised ALAC code in their chips’ audio decoders. Because of this, hackers could use a malformed audio file to achieve a remote code execution attack (RCE). RCE is considered the most dangerous kind of exploit since it does not require physical access to a device and can be executed remotely. Using the malformed audio file, hackers could execute malicious code, gain control of a user’s media files, and access the camera’s streaming functionality. The vulnerability could even be used to give an Android app additional privileges, providing the hacker access to the user’s conversations. Given Mediatek and Qualcomm’s position in the mobile chip market, Check Point Research believes the vulnerability impacts two-thirds of all Android phones sold in 2021. Fortunately, both companies issued patches in December of that year, which were sent downstream to device manufacturers. More... |
Thread Tools | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
How to download Android 13 for Google Pixel and other Android devices | phillynewsnow | AVN News Feed | 1 | 01-27-2024 02:59 PM |
How to install Android 13 on Google Pixel and other Android devices | phillynewsnow | AVN News Feed | 1 | 01-27-2024 02:59 PM |
How to download Android 13 for Google Pixel and other Android devices | phillynewsnow | AVN News Feed | 0 | 10-29-2022 03:30 AM |
How to install Android 13 on Google Pixel and other Android devices | phillynewsnow | AVN News Feed | 0 | 10-28-2022 07:35 AM |
Android 13 adds a new ?low power standby? mode for Android TV devices | phillynewsnow | AVN News Feed | 0 | 04-16-2022 07:32 AM |
Layout Options | Width:
Fixed
Contact Us -
SPJ Bulletin -
Archive -
Privacy Statement -
Terms of Service -
Top
| |