Join now - be part of our community!

Firmware patch for Fake-Id vulnerability

chriscap
Visitor

Firmware patch for Fake-Id vulnerability

Hi,

Is Sony planning to roll-out a patch for the Fake-ID Android  vulnerability that was recently discovered ?

See: http://bluebox.com/technical/android-fake-id-vulnerability/

Best regards,

Chris

3 REPLIES 3
rajanv
Visitor

This vulnerability needs more investigation. Let us wait for more information and see if it leads to a patch.

chriscap
Visitor

The bug was reported by Bluebox to Google in April.

Google sais it issued a patch to all (major) vendors.

The vendor is ofcourse  responsible for applying/testing/distributing the patch.

The fear is that most vendord will not upgrade 'older' phones leaving millions of devices vulnerable.

Note that a fix is also available in the  source tree.

https://android.googlesource.com/platform/libcore/+/android-cts-4.1_r4

rajanv
Visitor