Academics find eight vulnerabilities in Android's VoIP components

guest · Oct 1, 2019

Academics find eight vulnerabilities in Android's VoIP components
October 1, 2019
https://www.zdnet.com/article/academics-find-eight-vulnerabilities-in-androids-voip-components/

A team of academics has found eight vulnerabilities in the Android operating system's VoIP components. These vulnerabilities can be exploited to make unauthorized VoIP calls, spoof caller IDs, deny voice calls, and even execute malicious code on users' devices.

The research is the first of its kind. Until now, security researchers and academics have only looked at the security features of Voice-over-IP (VoIP) equipment, servers, and VoIP mobile apps, but none have analyzed the VoIP components inside Android itself.
The three-man research team set out to correct this.

Most of their testing revolved around using fuzzing, [...] The research team said they first fuzzed the Android Intent and System APIs for interactions with the operating system's native VoIP components; they then set up a VoIP testbed in their laboratory and fuzzed the different VoIP protocols [...]
Below is a breakdown of all the nine bugs:
Click to expand...

White paper: "Understanding Android VoIP Security: A System-level Vulnerability Assessment" (PDF): https://daoyuan14.github.io/papers/TR19_VoIPFuzzing.pdf

Log in or Sign up

Academics find eight vulnerabilities in Android's VoIP components

guest Guest

Log in or Sign up

Academics find eight vulnerabilities in Android's VoIP components

guest Guest

Useful Searches