XDA表示,该漏洞使得恶意程序通过简单脚本就可获得使用联发科64位芯片的Android设备访问权限,因此会影响到数百种智能手机、平板电脑和智能机顶盒。
谷歌在3月份的Android安全公告中提到了相应补丁(CVE-2020-0069),此前有关该漏洞的细节已经在网上流传了数月。值得注意的是,黑客仍可在数十种Android设备上利用该漏洞。
利用该漏洞的黑客可以通过多种方式造成损害,其可以安装应用程序,然后授予其入侵设备所需的任何权限。黑客也可利用漏洞中的Root权限启动勒索软件,可能使整个设备无法使用。
自2019年5月以来,联发科已经提供修复这一漏洞的补丁,但该公司不能强迫原始设备制造商修复设备。XDA解释说,而谷歌可以通过许可协议和相应条款修复设备。据XDA称,谷歌在发布补丁前几个月就知晓这一漏洞。
受影响设备清单:
-
Acer Iconia One 10 B3-A30
-
Acer Iconia One 10 B3-A40
-
Alba tablet series
-
Alcatel 1 5033 series
-
Alcatel 1C
-
Alcatel 3L (2018) 5034 series
-
Alcatel 3T 8
-
Alcatel A5 LED 5085 series
-
Alcatel A30 5049 series
-
Alcatel Idol 5
-
Alcatel/TCL A1 A501DL
-
Alcatel/TCL LX A502DL
-
Alcatel Tetra 5041C
-
Amazon Fire 7 2019 — up to Fire OS 6.3.1.2 build 0002517050244 only
-
Amazon Fire HD 8 2016 — up to Fire OS 5.3.6.4 build 626533320 only
-
Amazon Fire HD 8 2017 — up to Fire OS 5.6.4.0 build 636558520 only
-
Amazon Fire HD 8 2018 — up to Fire OS 6.3.0.1 only
-
Amazon Fire HD 10 2017 — up to Fire OS 5.6.4.0 build 636558520 only
-
Amazon Fire HD 10 2019 — up to Fire OS 7.3.1.0 only
-
Amazon Fire TV 2 — up to Fire OS 5.2.6.9 only
-
ASUS ZenFone Max Plus X018D
-
ASUS ZenPad 3s 10 Z500M
-
ASUS ZenPad Z3xxM(F) MT8163-based series
-
Barnes & Noble NOOK Tablet 7″ BNTV450 & BNTV460
-
Barnes & Noble NOOK Tablet 10.1″ BNTV650
-
Blackview A8 Max
-
Blackview BV9600 Pro (Helio P60)
-
BLU Life Max
-
BLU Life One X
-
BLU R1 series
-
BLU R2 LTE
-
BLU S1
-
BLU Tank Xtreme Pro
-
BLU vivo 8L
-
BLU Vivo XI
-
BLU Vivo XL4
-
Bluboo S8
-
BQ Aquaris M8
-
CAT S41
-
Coolpad Cool Play 8 Lite
-
Dragon Touch K10
-
Echo Feeling
-
Gionee M7
-
HiSense Infinity H12 Lite
-
Huawei GR3 TAG-L21
-
Huawei Y5II
-
Huawei Y6II MT6735 series
-
Lava Iris 88S
-
Lenovo C2 series
-
Lenovo Tab E8
-
Lenovo Tab2 A10-70F
-
LG K8+ (2018) X210ULMA (MTK)
-
LG K10 (2017)
-
LG Tribute Dynasty
-
LG X power 2/M320 series (MTK)
-
LG Xpression Plus 2/K40 LMX420 series
-
Lumigon T3
-
Meizu M5c
-
Meizu M6
-
Meizu Pro 7 Plus
-
Nokia 1
-
Nokia 1 Plus
-
Nokia 3
-
Nokia 3.1
-
Nokia 3.1 Plus
-
Nokia 5.1
-
Nokia 5.1 Plus/X5
-
Onn 7″ Android tablet
-
Onn 8″ & 10″ tablet series (MT8163)
-
OPPO A5s
-
OPPO F5 series/A73 — Android 8.x only
-
OPPO F7 series — Android 8.x only
-
OPPO F9 series — Android 8.x only
-
Oukitel K12
-
Protruly D7
-
Realme 1
-
Sony Xperia C4
-
Sony Xperia C5 series
-
Sony Xperia L1
-
Sony Xperia L3
-
Sony Xperia XA series
-
Sony Xperia XA1 series
-
Southern Telecom Smartab ST1009X (MT8167)
-
TECNO Spark 3 series
-
Umidigi F1 series
-
Umidigi Power
-
Wiko Ride
-
Wiko Sunny
-
Wiko View3
-
Xiaomi Redmi 6/6A series
-
ZTE Blade A530
-
ZTE Blade D6/V6
-
ZTE Quest 5 Z3351S
本文素材来自互联网