comscore Google finds a serious flaw in Android affecting Pixel and Samsung

Google finds a serious flaw in Android affecting Pixel, Samsung and Huawei smartphones

Google Project Zero Team has discovered an unpatched zero-day vulnerability in Android that affects Pixel, Samsung and Huawei phones. It also affects Xiaomi Redmi 5A, Redmi Note 5, Xiaomi A1, Oppo A3 and the Moto Z3.

  • Published: October 4, 2019 7:03 PM IST

Google has discovered an unpatched zero-day vulnerability in Android, its mobile operating system. The vulnerability affects the Google Pixel 1, Pixel 2, Huawei P20, Samsung Galaxy S7, Galaxy S8, Galaxy S9 and other devices. Since it is a zero-day exploit, the researchers disclosed it seven days after finding it. The bug affects smartphones running Android 8.x and later and is already being exploited in the wild. Interestingly, it is not a new bug and was discovered and patched in December 2017 on older versions of Android. Also Read - iMessage vulnerability: Hackers can now hijack your iPhone by just sending a text message

Also Read - Nokia 3 gets July security update; fixes critical media framework vulnerability

However, the patch did not get carried over to newer versions of Google‘s mobile operating system. The Project Zero Team discovered the exploit first and its Threat Analysis Group believes that it was used in real-world attack by Israel’s NSO Group. The company has been found to have used zero-day exploits on human rights and political activists. The report also notes that zero-day exploit is not as dangerous as others in the past. It cannot be triggered by a web browser or other app without additional exploits already being in place. Also Read - Internet Explorer: A zero-day security vulnerability allows hackers to steal files from Windows

“This issue is rated as High severity on Android and by itself requires installation of a malicious application for potential exploitation,” a representative for Android said. “We have notified Android partners and the patch is available on the Android Common Kernel. Pixel 3 and 3a devices are not vulnerable while Pixel 1 and 2 devices will be receiving updates for this issue as part of the October update.”

The Project Zero Team at Google has been responsible for bringing light to some of the prominent zero-day vulnerabilities. It has often irked other tech companies by going public with the revelation about the exploits. However, it is following the same due process with respect to exploit found on its own Android operating system. Other devices that are affected by this exploit include Xiaomi Redmi 5A, Xiaomi Redmi Note 5, Xiaomi A1, Oppo A3 and the Moto Z3.

For the latest tech news across the world, latest PC and Mobile games, tips & tricks, top-notch gadget reviews of most exciting releases follow BGR India’s Facebook, Twitter, subscribe our YouTube Channel. Also follow us on  Facebook Messenger for latest updates.
  • Published Date: October 4, 2019 7:03 PM IST

You Might be Interested

Google Pixel


Buy Now
Android 7.1 Nougat
Snapdragon 821 Quad-Core 2.15GHz Processor
12.3 MP with f2.0 Aperture, LED flash, Phase detection auto-focus, laser auto-focus
Google Pixel 2


Android 8.0.1, Oreo
Qualcomm Snapdragon 835 Octa-Core 2.35GHz + 1.9GHz, 64-Bit Processor
12.2 MP with f/1.8 aperture
Xiaomi Redmi 5A


Android 7.1 Nougat with MIUI 9
Qualcomm Snapdragon 425 Quad-Core 1.4GHz Processor
13 MP with ƒ/2.2 aperture

new arrivals in india

Best Sellers