Shulou(Shulou.com)11/24 Report--

CTOnews.com, Nov. 25, Google ProjectZero team recently discovered several security vulnerabilities in Samsung Exynos chipset Mali GPU. One of the vulnerabilities could lead to kernel memory corruption, the other could reveal physical memory addresses, and three vulnerabilities involved use-after-free.

CTOnews.com learned that the ProjectZero team said these vulnerabilities could allow attackers to continue reading and writing physical pages after returning to the system. Or in other words, an attacker who executes native code in an application can gain full access to the system and bypass the Android operating system's permission model.

These security vulnerabilities discovered by Project Zero attracted the attention of ARM in June and July this year. A month later, ARM fixed these Mali-related security flaws, but as of this writing, no smartphone manufacturer has applied security patches to address these vulnerabilities.

At present, many manufacturers, including Samsung, Xiaomi and OPPO, are using Mali GPU designed by ARM. These vulnerabilities were first discovered during the investigation of Pixel 6 devices. Although the Project Zero team has exposed these vulnerabilities, Google has not fixed them so far.

Samsung devices such as the Galaxy S22, which uses Snapdragon processors, are not affected by these vulnerabilities.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.