Fergie's Tech Blog

Google Android SDK Hits Security Speed Bump

Ryan Naraine writes on eWeek:

Researchers find ways to exploit outdated and vulnerable open-source image processing libraries in the Google Android software development kit.

Google's Android software development kit is using several outdated and vulnerable open-source image processing libraries, according to an alert from Core Security, a company that specializes in penetration-testing software.

In an advisory released Mar. 4, Core Security identified several exploitable heap overflows and integer overflows haunting Android, Google's software stack for mobile devices that includes an operating system, middleware and key applications.

posted by Fergie @ 3/04/2008 01:25:00 PM