Researchers find 146 vulnerabilities pre-installed on Android smartphones

Researchers from security company Kryptowire have found a total of 146 vulnerabilities that are factory-installed on Android smartphones. 18.Nov.19 10:06 AM By Shawn Highstraw Photo toinnov.com    509

Researchers from security company Kryptowire have found a total of 146 vulnerabilities that are factory-installed on Android smartphones. It concerns a total of 29 different manufacturers, including big names. The research was funded by the US Department of Homeland Security. Many small parties appear in the list of manufacturers, but Asus, Samsung and Xiaomi, for example, are outliers. Often these are apps that are pre-installed by the manufacturer, which contain various types of vulnerabilities. In more than 20% of the cases code execution is possible and in 23% it is possible to install apps. In the case of Samsung, according to the researchers, there are six different applications that comprise a total of 33 vulnerabilities. Two of these have been developed by external companies. In response, the company refers to external parties, Wired said. Of the remaining four made by Samsung itself, the company believes that the Android Security Framework addresses the vulnerabilities. The researchers contradict that. Samsung only deals with leaks that can be exploited by system apps, but with other manufacturers there are also vulnerabilities that other apps can exploit. For example, with Xiaomi there are twelve of those cases, with Asus six with two and with Sony two. In theory, these leaks can be exploited by any app.

---

Back to the list

Related Information: