Privacy Blog

"Friends don’t let friends get spied on.' – Richard Stallman, President of the Free Software Foundation and longtime advocate of privacy in technology.

Attackers Exploit 0-day Vulnerability that gives Full Control of Android Phones

A limited number of Android phones are exposed to a very serious vulnerability. A member of Google’s Android team has stated the vulnerability will be patched—in Pixel devices, anyway—in the October Android security update, which is likely to become available in the next few days. The schedule for other devices to be patched wasn’t immediately clear. Pixel 3 and Pixel 3a devices aren’t affected.

The phones affected include:

Pixel 1
Pixel 1 XL
Pixel 2
Pixel 2 XL
(Pixel 3 and Pixel 3a devices aren’t affected.)
Huawei P20
Xiaomi Redmi 5A
Xiaomi Redmi Note 5
Xiaomi A1
Oppo A3
Moto Z3
Oreo LG phones
Samsung S7
Samsung S8
Samsung S9

The above is a list of the phones that are KNOWN to have the problem. However, others may be added to the list as vulnerabilities are discovered.  Pixel 3 and Pixel 3a devices have been tested and definitely do not have the problem. (I’m glad I upgraded to a Pixel 3 some time ago!)

A member of Google’s Android team said in the same Project Zero thread that the vulnerability would be patched—in Pixel 1 and Pixel 2 devices, anyway—in the October Android security update, which is likely to become available in the next few days. The schedule for other devices to be patched wasn’t immediately clear.

You can learn more in an article by Dan Goodin in the Ars Technica web site at: https://tinyurl.com/privacy191004.

Categories: Cell Phones, Viruses & Malware

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.