ANDROID users are warned to update their devices as a programming bug could allow hackers to access their media files and more.
Threat actors could target Android users via a flaw in devices running on Qualcomm and MediaTek chipsets, Bleeping Computer reported Thursday.
This is because both chipsets have a compromised Apple Lossless Audio Codec (ALAC) code in their audio decoders.
ALAC is an audio coding format for audio compression originally made open source by Apple in 2011.
A vulnerability of this type could allow hackers to use Remote Code Execution (RCE) to access a device without gaining physical access to it.
RCE attacks are considered very serious because their effects can range from running malware to allowing a hacker to take complete control of a device.
This means attackers can access personal files, messages, photos, and even a phone’s camera streaming capability.
One way hackers can deploy an RCE attack is through a corrupted audio file, security firm Check Point said Thursday.
Apple has issued security updates for the bug on its smartphones, but nearly two-thirds of Android devices sold in 2021 remained unpatched, according to the Android Authority.
“According to IDC, MediaTek will power 48.1% of all Android phones sold in the U.S. as of Q4 2021, while Qualcomm currently controls 47% of the market,” Check Point said.
The company noted that the chipset companies had addressed the vulnerabilities after presenting their findings to MediaTek and Qualcomm last year.
“MediaTek has assigned ALAC issues CVE-2021-0674 and CVE-2021-0675,” Check Point said. “Qualcomm released the patch for CVE-2021-30351 in the December 2021 Qualcomm Security Bulletin.”
However, users who have not yet implemented the security patch may be making their data vulnerable to security breaches.
This is why experts recommend users to update their Android devices immediately.
To update your Android device, go to your Settings > About phone > Check for updates.
If an update is available, an “Update” button should appeareasy Tip It and then click ‘Install’.
Please note that depending on your phone’s operating system, you may also see “Install Now”, “Restart and Install” or “Install System Software”.
We pay for your stories!
Do you have a story for The US Sun team?
https://www.the-sun.com/tech/5180360/urgent-warning-android-hackers-photos/ Urgent warning to all Android users to update device now or risk having ALL your photos stolen