Skip to main content

All Android versions affected by this vulnerability, except Pie

Vulnerability

A recently published Nightwatch Cybersecurity analysis comes with an alert. All Android versions are affected by this vulnerability, including forks, except for Android Pie. Google fixed the issue at hand with Android 9 but plans no fixes for earlier versions of the OS. CVE-2018-9489 is the tracking code for the issue described.
Apparently, applications can circumvent permission checks and existing mitigations by listening to system broadcasts. These system broadcasts by Android OS, says the report, “expose information about the user’s device to all applications running on the device. This includes the WiFi network name, BSSID, local IP addresses, DNS server information and the MAC address“. A rogue app gaining access to this information can use it to “identify and track any Android device”, and even geolocate it. Accessing other network information could also allow malicious apps to “explore and attack the local WiFi network”.
As mentioned, Google is aware of the problem, and has issued a fix. This fix will only be available, sadly, to those running the latest version of Android: Pie. Google “does not plan to fix older versions”, says Nightwatch Cybersecurity.
Source: pocketnow

Comments

Popular posts from this blog

Google Gboard test makes finding a relevant GIF even faster

The whole point of Google's Gboard is to help you find relevant items without leaving your phone's keyboard, but how do you know there's something useful available while you're casually typing away? You might get a clue soon enough. Android Police has learned that Google is testing a smarter Gboard search feature that changes the distinctive "G" button when there's a relevant GIF, info or sticker search for what you're typing. Punch in "works for me" and you may see a sticker icon, while typing a famous name may show a magnifying glass to indicate that there's an info card. Tap the button and you'll search for the material without having to retype a thing. Google appears to have been testing this Gboard update since July and might not roll out the feature soon (or at all). However, the test recently widened to include more users. If Google likes the feature, it might just be a matter of time before the keyboard is smart enough to ha…

Yes, the LG V40 really has five cameras

The LG V40: Three cameras on the back, two on the front.

It's official: LG's upcoming flagship smartphone, the LG V40, has three cameras on the back and two on the front.

Though the official announcement of the phone is due Oct. 3, the company revealed some details about the phone — including photos and a video — on its Korean website


Interestingly, although the cameras are featured prominently in all these promo materials, LG hasn't revealed their specs. 

What we did find out, though, is the size of the phone's screen: It'll be 6.4 inches. The phone will be the same width as its 6-inch predecessor, the LG V30; the company claims it increased the screen size within the same form factor by reducing the size of the bezels.  The phone will be available in three colors: gray, red, and blue, and we get a glimpse of all three in the promo video (above). LG says it sandblasted the phone's rear glass to achieve a "silky feel," hence all the references to softnes…

This audacious curved-screen wearable has a gaudy camera

Just as Google is making Wear OS feel less like a smartphone system squeezed onto a watch, ZTE spinoff Nubia wants to slap a full phone on your wrist. At IFA 2018, the company unveiled a prototype device called the Nubia-A, which it's touting as a "wearable smartphone". That, to me, means smartwatch, but given the way companies like Apple, Google and Qualcomm seem to be moving away from wrist-worn smartphone wannabes, my definition might be inaccurate soon. Feast your eyes on this fascinating oddity, though you might want to avoid looking directly at the monstrous onboard camera.


Meet the Nubia-a "wearable smartphone" | 16 Photos



Wacky as the idea of the Nubia-A sounds, it's at least intriguing as proof that a curved screen can work, at least based on what I saw at its booth. It's Nubia's proprietary Flex display and was bright, colorful and easy to read, even at spots where it was bending around the model wrist. I wasn't allowed to touch the de…