Using a Samsung phone ? Chances are you 0wned

Thread View: rocksolid.shared.security

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by anon Thu, 07 May 2020 14:17

#129

Author: anon
Date: Thu, 07 May 2020 14:17

9 lines
620 bytes

https://mobile.twitter.com/j00ru/status/1258066559765004295


Today I'm happy to release new research I've been working on for a while: 0-click RCE via MMS in all modern Samsung phones (released 2015+), due to numerous bugs in a little-known custom "Qmage" image codec supported by Skia on Samsung devices. Demo: youtube.com/watch?v=nke8Z3…

Fixes for these bugs started rolling out with the May update, and Samsung officially addressed them as SVE-2020-16747 (security.samsungmobile.com/securityUpdate…). For now, we have assigned CVE-2020-8899 collectively to all 5218 unique crashes we reported.


Posted on def4

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads