Critical bug in popular chipsets exposes 2/3 of Android devices to hack
Vulnerabilities mentionedAll →
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2021-0674 | In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. In alac decoder, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064237. NVD description · AI analysis pending | 5.5 | <1% |
| — | ||
| CVE-2021-0675 | In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. In alac decoder, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06064258; Issue ID: ALPS06064258. NVD description · AI analysis pending | 7.8 | <1% |
| — | ||
| CVE-2021-30351 | An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking NVD description · AI analysis pending | 9.8 | 4% |
| — |
Full article346 words · extracted from securityaffairs.com · click to collapse
A critical RCE flaw in Android devices running on Qualcomm and MediaTek chipsets could allow access to users’ media files.
Security researchers at Check Point Research have discovered a critical remote code execution that affects the implementation of the Apple Lossless Audio Codec (ALAC) in Android devices running on Qualcomm and MediaTek chipsets.
The ALAC is an audio coding format developed by Apple for lossless data compression of digital music.
ALAC was developed in 2004 and Apple open-sourced it in 2011, since then many third-party vendors used it. Check Point Research reported that Qualcomm and MediaTek chipset makers used a vulnerable version of the ALAC code in their audio decoders, the security firm estimated that more than half of all smartphones worldwide are impacted.
A remote attacker can trigger the vulnerability by tricking the target device into opening a malformed audio file to execute arbitrary code.
“The impact of an RCE vulnerability can range from malware execution to an attacker gaining control over a user’s multimedia data, including streaming from a compromised machine’s camera.” reads the post published by CheckPoint. “In addition, an unprivileged Android app could use these vulnerabilities to escalate its privileges and gain access to media data and user conversations.”
The security firm responsibly shared its findings with MediaTek and Qualcomm and helped them to fix it.
MediaTek tracked the ALAC flaws as CVE-2021-0674 and CVE-2021-0675, while Qualcomm tracked it as CVE-2021-30351.
Both chipset makers addressed the issues in December 2021.
CheckPoint researchers did not disclose details of the flaw to avoid its exploitation in the wild, however, they plan to present their findings during the upcoming CanSecWest in May 2022.
Please vote for Security Affairs as the best European Cybersecurity Blogger Awards 2022 – VOTE FOR YOUR WINNERS
Vote for me in the sections “The Underdogs – Best Personal (non-commercial) Security Blog” and “The Tech Whizz – Best Technical Blog” and others of your choice.
To nominate, please visit: https://docs.google.com/forms/d/e/1FAIpQLSfxxrxICiMZ9QM9iiPuMQIC-IoM-NpQMOsFZnJXrBQRYJGCOw/viewform
Follow me on Twitter: @securityaffairs and Facebook
| [adrotate banner=”9″] | [adrotate banner=”12″] |
(SecurityAffairs – hacking, Android)
[adrotate banner=”5″]
[adrotate banner=”13″]
Text extracted automatically; images, tables and formatting may be missing. Original: https://securityaffairs.com/130459/hacking/critical-bug-popular-chipsets-android-hack.html