GhostMap Android Flaw Can Cause Persistent Crash Loops on Devices Installing Malformed APKs
Researchers at Bitdefender Labs discovered GhostMap, a critical Android vulnerability affecting devices running Android 10 and later, including Pixel 10 on Android 17. This flaw exploits inconsistent handling by Android's libziparchive and libandroidfw libraries when parsing APK files compressed with ZIP format, leading to a SIGBUS error that crashes the system_server process. Affected devices can enter an unrecoverable crash loop upon installation of specially crafted apps without needing user interaction or app execution, potentially requiring a factory reset and causing local data loss. Attempts to recover via safe mode or restart fail; USB debugging affords limited recovery only if previously enabled. Google classified the issue as "Won't Fix (Not Reproducible)" initially but later referred it to a relevant team for potential inclusion in future Android versions .
Linha do tempo
-
GhostMap Android Flaw Can Cause Persistent Crash Loops on Devices Installing Malformed APKs
ler a análise desta fonte ocultar
Researchers at Bitdefender Labs discovered GhostMap, a critical Android vulnerability affecting devices running Android 10 and later, including Pixel 10 on Android 17. This flaw exploits inconsistent handling by Android's libziparchive and libandroidfw libraries when parsing APK files compressed with ZIP format, leading to a SIGBUS error that crashes the system_server process. Affected devices can enter an unrecoverable crash loop upon installation of specially crafted apps without needing user interaction or app execution, potentially requiring a factory reset and causing local data loss. Attempts to recover via safe mode or restart fail; USB debugging affords limited recovery only if previously enabled. Google classified the issue as "Won't Fix (Not Reproducible)" initially but later referred it to a relevant team for potential inclusion in future Android versions .