Zero-day privilege escalation disclosed for Android

'Researchers have disclosed a zero-day vulnerability in the Android
operating system that gives a major boost to attackers who already
have a toe-hold on an affected device.

The privilege-escalation flaw is located in the V4L2 driver, which
Android and other Linux-based OSes use to capture real-time video. The
vulnerability results from a "lack of validating the existence of an
object prior to performing operations on the object," researchers with
Trend Micro's Zero Day Initiative said in a blog post published
Wednesday. Attackers who already have untrusted code running with low
privileges on a device can exploit the bug to access privileged parts
of the Android kernel. The severity score is rated a 7.8 out of a
possible 10 points.'

-- source: https://arstechnica.com/information-technology/2019/09/android-zeroday-gives-hackers-a-way-to-elevate-attacks/

Cheers, Peter
-- 
Peter Reutemann
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174
http://www.cms.waikato.ac.nz/~fracpete/
http://www.data-mining.co.nz/
_______________________________________________
wlug mailing list -- [email protected] | To unsubscribe send an email to [email protected]
Unsubscribe: %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s