Google sounds the alarm over Android flaw being exploited in the wild, possibly by NSO

Google sounds the alarm over Android flaw being exploited in the wild, possibly by NSO

Pixel, S-Series, Moto Z3 among vulnerable gear


Google is warning owners of some popular Android devices to keep a close eye on their gear following the release of an exploit for an unpatched flaw.


A post from the Chocolate Factory's in-house Project Zero crew outlines the flaw, a use-after-free bug in the Android Binder driver that could be exploited by a local app to elevate privileges.


In fact, strike the "could" because Google bug-hunters say the flaw is already being targeted in the wild by criminals to compromise some Android devices, including the Pixel 2, Samsung S7-S9, Moto Z3, and Huawei P20, among others.


While the flaw in question is unpatched in the Android kernel, the underlying use-after-free issue has been known for years and ..

Support the originator by clicking the read the rest link below.