CheckPoint Finds An RCE Vulnerability Affecting Millions of Devices



Israel-based cyber security company CheckPointdiscovered a vulnerability that could allow code execution on millions of devices.

CheckPoint researchers According to the details he shared with The Hacker News These vulnerabilities, located in the RCE (Remote Code Execution) type, allow attackers to access data without the need to execute any malware on their targets.

In addition, the privileges of Android applications running with low rights can be upgraded.

ALLHACK vulnerabilities caused by the open source lossless audio codec called ALAC (Apple Lossless Audio Codec), developed by Apple in 2011, are used by Qualcomm and MediaTek.



Also read: Google has finally found a real purpose with its new augmented reality glasses… just like the Apple and its Watch

While the vulnerabilities in the proprietary versions of ALAC are constantly being patched by Apple, the open source version used by the chip manufacturers does not seem to have been updated since 2011.

According to CheckPoint’s post Two of the vulnerabilities affect MediaTek and one affects Qualcomm chips.

  • CVE-2021-0674 (MediaTek): Information disclosure on ALAC codecs without any user intervention
  • CVE-2021-0675 (MediaTek): LPE vulnerability using ALAC codecs
  • CVE-2021-30351 (Qualcomm): Out-of bound memory access vulnerability caused by incorrect validation during audio playback

While these vulnerabilities were reported to be patched by CheckPoint in December 2021, Qualcomm and MediaTek have already released security updates for the devices.

Those who have not yet updated their devices at the moment do not need to do anything else to close the gap, except to apply software updates.



Related News

Oukitel WP19, the outdoor rugged phone, now available worldwide

Oukitel announced the launch date for the sale of the WP19 terminal, a resistant phone and whose autonomy is the largest until now in phones. Now the mobile

VPNs do not stop growing and these are the reasons

To surf the Internet, an option that gains weight every day is to have a vpn. In this article we are going to explain why it is more and more necessary and we

If Steam achievements aren’t working for you, try this

For years the platform to play on our PC, Steam, has become the undisputed leader in the sector. Despite the many stores that we can use to download and play

iPhone missing for 10 months recovered from the bottom of a river, how did it end?

If you happen to lose your precious iPhone in a river, you would never think you would be able to retrieve it after even 10 months?

POCO X4 and POCO F4 GT arrive in Slovakia: Deliver flagship performance at an affordable price

POCO, popular technology brand Among young people in the world, it has announced the global launch of the POCO F4 and POCO X4 GT, the latest devices with the

Overwatch 2 will replace the current game at launch

As previously understood, Overwatch 2 will replace the existing game at launch. In short, current owners of Overwatch will download a patch and, along with