Zimperium on Monday revealed a stunning discovery by researcher Joshua Drake — a flaw in Android’s Stagefright media playback engine that could expose millions of mobile device users to attack without their having done anything. Stagefright, which processes several popular media formats, is implemented in native code — C++ — which is more prone to memory corruption than memory-safe languages such as Java, according to Zimperium. Stagefright has several remote code execution vulnerabilities that can be exploited using various methods.
Super-Scary Android Flaw Found
Posted by: Richard Adhikari July 28, 2015 10:51 AMZimperium on Monday revealed a stunning discovery by researcher Joshua Drake — a flaw in Android’s Stagefright media playback engine that could expose millions of mobile device users to attack without their having done anything. Stagefright, which processes several popular media formats, is implemented in native code — C++ — which is more prone to memory corruption than memory-safe languages such as Java, according to Zimperium. Stagefright has several remote code execution vulnerabilities that can be exploited using various methods.