Android 'Stagefright' exploit

Hi,

Currently I am using CM12 Nightlies on my N5.

I ready about Stagefright sometime back and found that my phone has been sending and receiving thousands of SMS and MMS. So i blocked all access to CM12 Messaging app using Privacy Guard. Privacy Guard is one reason why i love CM12, loved slimrom too...

Attached are screenshots of my Messaging app and a report by Stagefright Detector.

1. How android phones are really hacked by simple SMS/MMS
2. More about Stagefright
3. XDA on Stagefright

Did google really fix this and did CM do anything about this???

this is frightening!!! :(

How many of you have been exposed to this???

Attached Thumbnails

 


 


 


 


 

XT1053 222.27.5 Stagefright FXZ

I was doing some research on some of the other Moto X forums and I noticed that Crash][ over at 4pda.ru has managed to re-upload the FXZ image of the latest update!

Here is the link to his XT1053 page with the FXZ :)

Big thanks to Crash][ for downloading from the super slow filefactory site and re-uploading it for everyone else

Music player dev - protecting users against Stagefright 2?

We write a music player app. The info on Stagefright 2:

https://blog.zimperium.com/zimperium...-mp3mp4-media/

says that third party music players that use Android's standard media playing libraries are vulnerable. OS patches are on their way but we'd like to do our bit, we support down to 2.1.

But dev-level details on the exploit seem to be hard to find right now.

It's something to do with the metadata of the file, is that just id3 tags? If so it would be relatively simple to edit the file to sanitise them before passing them to MediaPlayer, maybe raising an error if the file can't be written to. Might have to use a third-party library to do that rather than Android's parser which might trigger the exploit.
It mentions 'Android previewing the file' - what does 'previewing' mean? Is that the browser calling MediaPlayer.setDataSource() or MediaPlayer.prepare()?
It also mentions 'libutils' - is that MediaPlayer accessing libutils or does the app need to access libutils in some other way? I'm guessing it's not only MediaCodecInfo and friends as they are API 16+.

Stagefright Security Update for Nexus 4/ Zimperium shows 2 new vulnerabilities

Opened my phone today to see if the security update was ready for install. Not only was the update not there, but there was 2 new vulnerabilities in : CVE 2015 3376 & CVE 2015 6602. Is Google late or are these updates coming out in a different format?? My phone is a rooted Nexus 4 / Android version 5.1.1 / Build # LMY 48M /. I certainly wish Google would keep us updated as to the release of these Security updates. If this October Security update is available for my phone, could someone re-direct me to the site so I can download and install it. Thanks...:) This post is all about the Stagefright Security vulnerabilities. Updates for said vulnerabilities only.

Any one UK (GB) got the stagefright update?

just received the stage fright update on my xt1068 (moto g 2nd gen Dual sim)

this missus having a xt1072 retgb hasn't got it yet and is slightly miffed:victory:

wondered if anybody has it rolling out yet?

HTC Desire 610 problem after Stagefright Patch

Hello, I'm from italy so i hope you understand my english. My HTC Desire 610 after the stagefright patch (software version 1.31.401.4) have some issuses at the screen, it start flickering every mornig, after the night charge, than the screen become black with the only backight, the touch and the system cntinue working without trouble. Before the patch the smartphone work with no problems it start flickering when the upgrade is in the app adjustment phase (45 on 259). I do the factory reset but the problem remaing, if i turn off the device for 1 r 2 hours it start work.
How can i solve this problems? If I downgrade the software version (firmware?) i solve the problem?

HTC Desire 610 problem after Stagefright Patch 1.31.401.4

Hello, I'm from italy so i hope you understand my english. My HTC Desire 610 after the stagefright patch (software version 1.31.401.4) have some issuses at the screen, it start flickering every mornig, after the night charge, than the screen become black with the only backight, the touch and the system cntinue working without trouble. Before the patch the smartphone work with no problems it start flickering when the upgrade is in the app adjustment phase (45 on 259). I do the factory reset but the problem remaing, if i turn off the device for 1 r 2 hours it start work.
How can i solve this problems? If I downgrade the software version (firmware?) i solve the problem?

Stock OH3 Stagefright fix for Heimdall

WIP!
This is a Heimdall flashable file. This will NOT work on Odin.
Heimdall:
This is NOT ROOTED!
BACK UP ALL YOUR DOCUMENTS AND PICTURES/VIDEOS ON YOUR INTERNAL SD CARD. THIS WILL ERASE EVERYTHING.

XDA:DevDB Information
Stock OH3 Stagefright fix for Heimdall, ROM for the Sprint Samsung Galaxy Note II

Contributors
amadorsg1
ROM OS Version: 4.4.x KitKat
Based On: Stock

Version Information
Status: Stable

Created 2015-10-09
Last Updated 2015-10-09

Stock OH3 Stagefright fix ROM

WIP!
This is a ROM for TWRP or other custom recovery.
This is NOT ROOTED!
BACK UP ALL YOUR DOCUMENTS AND PICTURES/VIDEOS ON YOUR INTERNAL SD CARD. THIS WILL ERASE EVERYTHING.

XDA:DevDB Information
Stock OH3 Stagefright fix ROM, ROM for the Sprint Samsung Galaxy Note II

Contributors
amadorsg1
ROM OS Version: 4.4.x KitKat
Based On: Stock

Version Information
Status: Stable

Created 2015-10-09
Last Updated 2015-10-09

Sony Z5 stagefright status

So far, Sony has a lot to do in terms of security. They left a lot of holes open. Sad day.

Attached Thumbnails