Samsung patches a critical exploit its smartphones had since 2014

In this week's Security update, Samsung fixed a security flaw relating to how the company's Android skin handles the custom image format Qmage (.qmg files). Support for the format with the bug present has been available on all of the South Korean giant's smartphones since 2014.

The exploit was (via ) by security researcher Mateusz Jurczyk at Google's Project Zero team of security analysts, who are tasked with finding zero-day vulnerabilities on a wide range of products.

As explained by Mateusz, the issue stems from an Android library named Skia that handles the loading and displaying ...

from PhoneArena https://ift.tt/2W9p0co