share_log

Android WhatsApp Users Can Exhale: A Major Bug That Exposed Data May Finally Be Fixed

Android WhatsApp Users Can Exhale: A Major Bug That Exposed Data May Finally Be Fixed

Android WhatsApp用户可以呼出:一个暴露数据的重大漏洞可能最终被修复
Benzinga Real-time News ·  2022/09/27 12:42
  • Meta Platforms, Inc (NASDAQ:META) elaborated on a "critical"-rated security vulnerability affecting its Android app that could allow attackers to remotely plant malware on a victim's smartphone during a video call.
  • WhatsApp described the bug as an integer overflow bug.
  • It happens when an app tries to perform a computational process but has no space in its allotted memory, causing the data to spill out and overwrite other parts of the system's memory with potentially malicious code, TechCrunch reports.
  • Malwarebytes' determined that the bug is present in a WhatsApp app component called "Video Call Handler," which, if triggered, would allow an attacker to take complete control of a victim's app.
  • The critical-rated memory vulnerability is similar to a 2019 bug, which WhatsApp blamed on Israeli spyware maker NSO Group in 2019.
  • Recently, WhatsApp also disclosed another vulnerability, which could allow hackers to run malicious code on a victim's Apple Inc (NASDAQ:AAPL) iOS device after sending a malicious video file.
  • In August, Facebook resolved a glitch under which users faced bizarre posts on their feed. Users complained about seeing random posts and activity tickers to celebrities' pages from strangers on their timelines.
  • Price Action: META shares traded lower by 0.52% at $135.66 on the last check Tuesday.
  • Photo Via Company
  • Meta平台,Inc.纳斯达克(Sequoia Capital:META)详细阐述了一个影响其安卓应用程序的“严重”级安全漏洞,该漏洞可能允许攻击者在视频通话期间在受害者的智能手机上远程植入恶意软件。
  • WhatsApp将该漏洞描述为整数溢出漏洞。
  • 据TechCrunch报道,当应用程序试图执行计算过程,但分配的内存中没有空间时,就会发生这种情况,导致数据溢出,并用潜在的恶意代码覆盖系统内存的其他部分。
  • Malware Bytes确定该漏洞存在于一个名为“Video Call Handler”的WhatsApp应用程序组件中,如果触发,将允许攻击者完全控制受害者的应用程序。
  • 这个严重级别的内存漏洞类似于2019年的一个漏洞,WhatsApp将其归咎于以色列间谍软件制造商NSO Group在2019年。
  • 最近,WhatsApp还披露了另一个漏洞,该漏洞可能会让黑客在受害者的苹果纳斯达克(Youku)iOS设备在发送恶意视频文件后。
  • 今年8月,Facebook解决了一个故障,在这个故障下,用户在他们的feed上面临着奇怪的帖子。用户抱怨说,在他们的时间线上,看到陌生人随意发布和活动标记到名人的页面上。
  • 价格行动:在周二的最后一次检查中,Meta股价下跌0.52%,至135.66美元。
  • 照片通过公司
声明:本内容仅用作提供资讯及教育之目的,不构成对任何特定投资或投资策略的推荐或认可。 更多信息
    抢沙发