Google fixes two Android security flaws actively exploited in targeted attacks by hackers

Since the hackers may have exploited the Android security bugs before developers knew about it and released patches for it, the security attack could be termed as a zero-day attack. Google also suggested that one of the two security flaws was a zero-click vulnerability, meaning that user interaction was not required to compromise the security of targeted Android devices.

“The most severe of these issues is a critical security vulnerability in the System component that could lead to remote escalation of privilege with no additional execution privileges needed,” the security bulletin read.

Google further said that source code patches for these issues will be released to the Android Open Source Project (AOSP) repository in the next 48 hours. Android partners are generally notified of all such issues at least a month before a security bulletin is released, it added.

One of the two zero-day security flaws termed as ‘CVE-2024-53150’ was first identified by global non-profit Amnesty International in collaboration with Google’s Threat Analysis Group (TAG).

The second zero-day security flaw termed as ‘CVE-2024-53197’ was also flagged by Google’s security team that primarily monitors State-backed cyberattacks. This vulnerability was reportedly found in the kernel or core of the Android operating system.

In February this year, Amnesty International released a report which found that Israeli forensic software vendor Cellebrite had allegedly exploited three zero-day vulnerabilities to hack into Android phones. It is worth noting that Cellebrite’s customers include law enforcement authorities looking to use the company’s tools to unlock and forensically analyse devices confiscated in connection with their investigations.

Curated For You

Dhurandhar Box Office Worldwide Collection Day 19 Update: Ranveer’s film earns Rs 925 cr globally; Dhurandhar 2 to release pan-India

Supreme Court accepted govt’s 100-m Aravalli rule, its own panel had opposed it

Aditya Dhar addresses Dhruv Rathee’s Dhurandhar criticism as film crosses Rs 900 cr mark: ‘A video maker got swept away by criticism’