A security vulnerability in the Android system allowed hackers to exploit the phone’s camera app even without the user’s permission. This Android vulnerability was found on the Google Camera app and Samsung’s camera app.
The Android vulnerability was classified as CVE-2019-2234 and it was discovered by Checkmarx Security Research Team. The security researchers discovered that the Pixel 2 XL and Pixel 3 camera app had permission bypass issues. The same vulnerability was found on the Samsung camera app as well affecting hundreds of millions of smartphones.
This Android vulnerability allowed hackers to take control of the smartphone’s camera and use it to capture photos and record videos as well. Hackers could manage this through a rogue Android app. Checkmarx also discovered that hackers had the potential to access videos and photos saved on the phone. More intricate details like the GPS metadata and EXIF data of the photos could be attained by hackers.
Since photos and videos are usually stored on SD card hackers could easily access them. Checkmarx also explained how storage permissions for SD card data can be easily exploited. This exploitation could take place even during voice calls where the hacker could record the entire conversation of the caller and receiver both.
“In doing so, our researchers determined a way to enable a rogue application to force the camera apps to take photos and record video, even if the phone is locked or the screen is turned off. Our researchers could do the same even when a user was is in the middle of a voice call,” Checkmarx explained.
After having informed Google about the vulnerability, the company patched this bug through an update for the Google Camera app in July. The same was provided for other Android manufacturers as well.
Pingback: twitter reseller panel
Pingback: axiolabs reviews
Pingback: W88
Pingback: the asigo system reviews
Pingback: كلمات
Pingback: fake cartier santos de galbee
Pingback: blackeaglelandscaping.info
Pingback: weed for sale
Pingback: tutor
Pingback: steroid pills for sale
Pingback: danh de online
Pingback: Eddie Frenay
Pingback: fun88
Pingback: 안전공원
Pingback: cats having fun
Pingback: https://owensboroflooring.com/
Pingback: Echo MS-40BP manuals
Pingback: wig
Pingback: Mankato Towing
Pingback: a person with two sex organisms
Pingback: https://euroclub-th.com/
Pingback: golden teacher dosage
Pingback: best cvv sites
Pingback: replica rolex daytona stainless steel
Pingback: burnley girls
Pingback: sbobet
Pingback: เงินด่วน ได้จริง
Pingback: sbobet
Pingback: Hidden Wiki
Pingback: Alexa Nikolas addict
Pingback: buy vitual credit card
Pingback: Double Cupcake 3.5g Flower
Pingback: Order magic mushroom online Sydney
Pingback: magic mushrooms blue meanies
Pingback: Darknet market links list 2023