By using this site, you agree to the Privacy Policy and Terms & Conditions.
Accept
Okay.ngOkay.ngOkay.ng
Font ResizerAa
  • News
    • Politics
  • Entertainment
  • Business & Economy
  • Sport
  • Tech
Reading: Another Critical Vulnerability Puts All Android Users At Risk. (Details)
Share
Font ResizerAa
Okay.ngOkay.ng
  • News
  • Entertainment
  • Business & Economy
  • Sport
  • Tech
Search
  • News
    • Politics
  • Entertainment
  • Business & Economy
  • Sport
  • Tech
Follow US
  • About Okay.ng
  • Advertising on Okay.ng
  • Contact Okay.ng
  • Careers
  • Meet the Team behind Okay.ng
  • Ownership and Funding of Okay.ng
  • Editorial Principles at Okay.ng
© OKN MEDIA PUBLISHING 2022 - All rights reserved
Tech

Another Critical Vulnerability Puts All Android Users At Risk. (Details)

Damilola A.
By Damilola A.
Published: August 20, 2015
Share
2 Min Read
SHARE

android_vulnerability_1
Another day, another Android vulnerability. A new security flaw has been found in the mediaserver component of Google’s mobile operating system, the same component that gave rise to the Stagefright bug. The vulnerability in question lies in the way Android handles media files, and if exploited, could allow an attacker to execute arbitrary codes. The vulnerability affects the vast majority of Android devices, running on version 2.3 to 5.1.1. Google has already published a fix for it to the AOSP program, though due to heavy fragmentation in the ecosystem, it could take a while before hitting your device.

Called CVE-2015-3842, the vulnerability has been found in the AudioEffect component of Android’s mediaserver component. The vulnerability, as reported by security firm TrendMicro, lies in the implementation of this feature which does not properly check for buffer sizes supplied by clients. An attacker can abuse this vulnerability by convincing users to install apps that don’t require any special permissions, and afterwards run arbitiary code on their devices.

“It uses an unchecked variable which comes from the client, which is usually an app. For an attack to begin, attackers convince the victim to install an app that doesn’t require any required permissions, giving them a false sense of security,”wrote Trend Micro in a blog post.

Among the things that could happen in the aftermath of the attack include compromised control of the camera, improper rendering of mp4 files, tweaks in privacy settings – essentially the tasks that are linked to the mediaserver component.

- Advertisement -

The comforting part of the news is that there are no known active exploits based on this vulnerability – and Google has already published a fix for it. Though, when will you receive this update on your device depends on the OEM. Trend Micro claims users can download its mobile security suite TMSS to be able to detect any threats trying to use the vulnerability.

Stay Updated on the Go with Our Latest News—Join Our WhatsApp Channel Now!
TAGGED:Android Flaws
Share This Article
Facebook Whatsapp Whatsapp Telegram Email Copy Link Print
ByDamilola A.
Entertainment News Reporter
Follow:
Damilola is a dedicated entertainment writer for Okay Nigeria (Okay.ng). He joined the platform with the aim of using his experience in the Entertainment industry to share wonderful articles in this field. Dammy is a die-hard fan of Wizkid.
Previous Article UNILAG Releases Post-UTME 2015 Result
Next Article PHOTO: Checkout The Next Yet To Be Released Blackberry Android.

Connect with Okay on Social

FacebookLike
XFollow
InstagramFollow
TelegramFollow

Dollar/Naira Rates

Dollar to Naira Rate

Okay.ng Logo
Buy Rate ₦1,560.00
Sell Rate ₦1,570.00

Updated: 1 day ago

Displayed rates are for informational purposes only and are subject to change.

Quick Converter

- Advertisement -
- Advertisement -
Ad imageAd image
- Advertisement -
Ad imageAd image

Recent Posts

Tinubu’s State Visit to Saint Lucia Marks Historic Diplomatic and Cultural Engagement, Presidency Clarifies
International News
President Bola Tinubu Suspends Implementation of Financial Reporting Council Amendment Act 2023
News
Aminu Dantata to be Buried in Madinah After Saudi Approval
News
VIDEO: NDLEA Issues Strong Advisory to Travellers Against Carrying Unknown Bags
Crime Video
SERAP Demands Transparency from Nigeria’s Governors on Security Vote Spending
News
- Advertisement -
Ad imageAd image

You May Also Like

NewsSecurity

Security Situation Improving, CDS Urges Continued Support from Nigerians

Oluwadara Akingbohungbe
Oluwadara Akingbohungbe
June 29, 2025
PoliticsTop stories

David Mark to Lead Anti-Tinubu Coalition Under African Democratic Congress Platform

Oluwadara Akingbohungbe
Oluwadara Akingbohungbe
June 29, 2025
InternationalNews

FG to Plant 20 Billion Trees Next Rainy Season in National Reforestation Drive, Says VP Shettima

Oluwadara Akingbohungbe
Oluwadara Akingbohungbe
June 28, 2025
Okay.ngOkay.ng
Follow US
© OKN MEDIA PUBLISHING 2025 - All rights reserved
  • About Okay.ng
  • Advertising on Okay.ng
  • Contact Okay.ng
  • Careers
  • Meet the Team behind Okay.ng
  • Ownership and Funding of Okay.ng
  • Editorial Principles at Okay.ng
adbanner
Welcome Back!

Sign in to your account

Username or Email Address
Password

Lost your password?