Researchers Develop Exploit To Take Control of Android Smartphones



[ad_1]

  Android RAMpage Eight researchers have unveiled the proof of concept RAMpage, which allows to support Android devices with lpddr memory and all Android smartphones since 2012




On the site RAMpage, researchers, including three from the University VU of Amsterdam, state that all devices with Android are responsive since 2012. They tested the proof of concept on a LG G4 with Android 7.1. 1, but they assume that it also works on other devices. It is even "very likely" that the method works on desktop systems.

The researchers developed RAMpage during a study on the effectiveness of the solutions were developed against Rowhammer, a vulnerability that emerged in 2015. RAMpage has depressed the pages of memory to obtain random access in reading and writing.

Google implemented changes in Android 4.0 as a solution to Rowhammer's vulnerabilities. For example, Google disallowed contiguous memory allocations as protection against Drammer, a Rowhammer attack specifically targeting mobile platforms. However, the researchers describe in the RAMpage report that the protection is insufficient and that the whole system can still be supported via the memory. Researchers are now working with Google on a solution.

via [tweakers]

[ad_2]
Source link