Millions of Android devices were vulnerable to a remote code execution attack due to flaws in an audio codec that Apple open-sourced years ago but which hasn’t been patched since. Researchers at Check Point discovered a bug in Apple Lossless Audio Codec (ALAC), which is audio-compression technology that Apple open-sourced in 2011.
Link: Android security: Flaw in an audio codec left two-thirds of smartphones at risk of snooping, say researchers
via http://www.zdnet.com
Techie.Buzz 