In light of Android’s mediaserver issues, Google’s latest Android security update focused on flaws related to the operating system’s treatment of media files. Android’s current flaws are similar to problems that cropped up with Windows more than a decade ago.
Google addressed seven vulnerabilities as part of this month’s Android security update, released this week. Of the critical vulnerabilities, one was in the libutils component (CVE-2015-6609) near where Stagefright flaws were found over the summer, and the other was in the Android mediaserver component (CVE-2015-6609). They were rated as critical, as they could allow remote code execution when handling malformed media files.
To read this article in full or to leave a comment, please click here