new vulnerability discovered on Android devices with KitKat and Mediatek hardware

[zMeul]

source: http://www.androidauthority.com/mediatek-bug-kitkat-vulnerable-670448/

 

Although MediaTek is downplaying the effects, it seems a software bug has created a vulnerability on Android devices running Android 4.4 KitKat. Exploits taking advantage of the vulnerability could gain root access to the device, brick the phone, or spy on communications. MediaTek has confirmed that the bug exists and they say their security team is working to come up with solutions.

The bug was pointed out by security researcher Justin Case, who tweeted about the vulnerability’s existence earlier this month. Today MediaTek acknowledged that the potential for malicious exploits was real. The Taiwan-based chipmaker says that the vulnerability is the result of smartphone manufacturers failing to follow their instruction to disable the debug feature before shipping the smartphones. The company did not release the names of the manufacturers responsible, and as a result, we don’t know for sure which device models this bug affects.

KitKat you say, how bad can it be? it's not like it dominates the Android market share, riiight!?

oh .. how wrong you'd be: https://developer.android.com/about/dashboards/index.html

 

Android phone manufacturers ... plague I tell you, fucking plague 

to note, not all KitKats are with Mediatek silicon

 

(can't find more recent data on Mediatek's market share)

[Lethal Seraph]

Justin Case? Just in case.... heh.

Wtf though.. that's a lot of devices potentially in danger.

[,,,,,,,,,,,,,,,,,,,,,,,,,,]

Awesome, lets quickly create an exploit pack and sell it.

[QueenDemetria]

KitKat you say, how bad can it be? it's not like it dominates the Android market share, riiight!?

oh .. how wrong you'd be: https://developer.android.com/about/dashboards/index.html

But not all 36% of Kitkat devices are Mediatek based, so the amount effected is smaller.

[Notional]

Good thing android is updated automatically to the newest version by Google. Oh wait, no it doesn't.

[suicidalfranco]

And how many of that 36% have a mediatek Soc?

[spartaman64]

 

(can't find more recent data on Mediatek's market share)

 

apple????

 

edit: nvm includes all smartphones not just android

[Dabombinable]

I bought my $100 phone for half price and loved it. So there is now a catch to it as well? (I was comparing it to a baytrail based tablet, so I found out the CPU specs for it).