An Interest In:
Web News this Week
- April 2, 2024
- April 1, 2024
- March 31, 2024
- March 30, 2024
- March 29, 2024
- March 28, 2024
- March 27, 2024
Some of Our Sources
- Techcrunch
- Technology Review
- Team Treehouse
- Smashing Magazine
- My Ink Blog
- Fudge Graphics
- Web Resource Source
- Android Headlines
- Daily Now
- The Verge
Help Webnuz
Referal links:
June 3, 2020 06:45 pm
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/LHsz0hvOiaE/new-cold-boot-attack-affects-seven-years-of-lg-android-smartphones
New Cold Boot Attack Affects Seven Years of LG Android Smartphones
South Korean phone manufacturer LG has released a security update last month to fix a vulnerability that impacts its Android smartphones sold over the past seven years. From a report: The vulnerability, tracked under the identifier of CVE-2020-12753, impacts the bootloader component that ships with LG smartphones. In March this year, US software engineer Max Thomas discovered a vulnerability in the bootloader component that had been added to LG smartphones starting with the LG Nexus 5 series. In a technical breakdown of the vulnerability published on Tuesday, Thomas says the bootloader component's graphics package contains a bug that lets attackers sneak in their own code to run alongside the bootloader's graphics under certain conditions, such as when the battery dies out and when the device is in the bootloader's Download Mode. Thomas says that threat actors who perfectly time an attack can gain the ability to run their own custom code, which could allow them to take over the bootloader, and inherently the entire device.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/LHsz0hvOiaE/new-cold-boot-attack-affects-seven-years-of-lg-android-smartphones
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot