Millions of Android devices have been vulnerable for 5 years (but don’t worry too much)
May06
A security researcher has said that hundreds of different models of Android devices are vulnerable to leaking data to seemingly innocuous apps. Announced by FireEye in a blog post, the vulnerability allows an attacker to potentially do things like view the SMS database and call history. as well as changing system settings. Unfortunately, the problem stems from a Qualcomm software package, which is used across hundreds of different devices, including as part of the Cyanogen package too in some instances. “The vulnerability was introduced when Qualcomm provided new APIs as part of the ‘network_manager’ system service, and subsequently the ‘netd’…
This story continues at The Next Web