GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
Bitdefender discovered a ZIP entry bug in Android 10+ that causes SIGBUS crashes in a persistent reboot loop fixable only by factory reset.
Bitdefender found a vulnerability in Android's handling of ZIP entries in APKs that mishandles compression method and uncompressed length fields. This triggers SIGBUS errors leading to crash loops that continue even in safe mode. The only resolution is a factory reset. Google has not issued a fix, stating the issue falls outside security scope.
Unconfirmed: Google has not confirmed if the bug meets security criteria or provided any mitigation
- Affects all Android versions 10 and above
- Only fix is factory reset
- Detected via malformed APK resources
- Potential for device bricking or disabling security tools
- Bitdefender calls it Android.Riskware.Ghostmap.rA
Impact: Crash loops on Android devices requiring factory reset
- 1.Inspect APK files for malformed ZIP entries before installation
- 2.Perform factory reset if crash loop occurs
- 3.Use resource-parsing code carefully in security tools
From the original article
2 min read at infosecurity-magazine.com
Bitdefender warns that unfixed GhostMap bug could force users to factory reset their device
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.