Google Warns of New Android 0-Day Vulnerability Under Active Targeted Attacks

Google has rolled out its monthly security patches for Android with fixes for 39 flaws, including a zero-day vulnerability that it said is being actively exploited in the wild in limited, targeted attacks. Tracked as CVE-2021-1048, the zero-day bug is described as a use-after-free vulnerability i...

CVE-2021-28663

creationtimestamp| type| source ---|---|--- 2021-06-08 17:52:38+00:00| seen| https://t.me/androidMalware/1217 2021-09-01 11:10:02+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4197 2021-09-02 08:17:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/490...

Android patches for 4 in-the-wild bugs are out, but when will you get them?

In the Android Security Bulletin of May 2021, published at the beginning of this month, you can find a list of roughly 40 vulnerabilities in several components that might concern Android users. According to info provided by Googles Project Zero team, four of those Android security vulnerabilities...

CVE-2021-28663

CVE-2021-28663 is an Arm Mali GPU kernel-driver use-after-free memory corruption vulnerability that can enable privilege escalation or information disclosure. Affected GPUs span Bifrost (r0p0–r28p0 before r29p0), Valhall (r19p0–r28p0 before r29p0), and Midgard (r4p0–r30p0). The issue arises from ...