Security failure affects all Android phones released since 2012



[ad_1]

A new security hole is affecting Android smartphones launched since 2012. Calling RAMpage, this vulnerability allows hackers to obtain administrator access to collect sensitive information from a mobile phone.

Published by a group of eight researchers Three different universities, the failure of RAMpage, when they are exploited, can result in the collection of data such as pbadwords stored in a pbadword manager or in the browser, personal photos, emails, instant messages and more.

a feature called ION, which is a memory management system introduced in Android 4.0 Ice Cream Sandwich version, which was launched in 2012. In addition to potentially reaching all mobile phones with the mobile system launched since then, researchers have not ruled out that it can also be exploited on iOS devices and even on PCs.

According to the researchers, the vulnerability allows malicious program to break the isolation between user applications and the operating system, allowing hackers to collect information at the system level. Since the failure affects the ION function, any device using the LPDDR 2/3/4 RAM may be affected.

With Android Central, Google minimized the risks caused by the crash. "We are working closely with the research team, and while this vulnerability is not a practical concern for most users, we appreciate all the efforts made to protect them and advance the field of research. Security. theoretical concept of researchers, we are not aware of any attack against Android devices. "

[ad_2]
Source link