Shulou(Shulou.com)11/24 Report--

Thanks CTOnews.com netizen soft media new friend 1933769 clue delivery! CTOnews.com May 2 News If you have some pre-installed Android apps on your phone, you may have encountered such a situation: When the app has a problem, you can restore it by downgrading to the old version. Although this method is convenient, it also has certain security risks. Because older versions of apps may have vulnerabilities that have been fixed, if exploited by hackers, it may lead to phone intrusion or data leakage.

To address this issue, Google recently released a security patch for Android in May, fixing a vulnerability numbered CVE-2023-21116, which allows users to downgrade to an older version of the app than the pre-installed version on the device. Now this vulnerability has been fixed and users can no longer downgrade to an older version of the app than the pre-installed version.

CTOnews.com notes that this vulnerability is rated moderately dangerous because to exploit it, hackers must have physical access to the phone and be able to access it through ADB. This means that ordinary users are unlikely to be targeted by hackers unless they are some high-value object.

Android apps are those pre-installed on mobile phones, such as phone, SMS, camera apps, etc. These apps typically have higher levels of permissions than apps downloaded from the app store, so if a vulnerability exists, it could pose a greater risk to the phone. Samsung's Text To Speech app, for example, once had a vulnerability that allowed other apps to gain higher privileges. This vulnerability was fixed as early as 2019, but if users downgrade to an older version, they may be exposed again.

Android's May security patch blocks this downgrade vulnerability and improves the phone's security. It is recommended that all users of Android update patches in time to protect their phones and data.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.