Novembala watha, cholakwika chachikulu chachitetezo chidapezeka mu chip cha zithunzi za Mali, chomwe chidakhudza mamiliyoni a mafoni am'manja a Samsung omwe akuthamanga pa Exynos chipsets. Kuyambira pamenepo, chiwopsezo chakhala mbali ya unyolo kuti hackers bwino masuku pamutu kutsogolera mosakayikira Samsung Internet osatsegula owerenga kuti Websites njiru. Ndipo ngakhale unyolowo wathyoledwa, vuto lachitetezo ku Mali likupitilirabe kukhudza pafupifupi chipangizo chilichonse Galaxy ndi Exynos, kupatula mndandanda Galaxy S22, yomwe imagwiritsa ntchito Xclipse 920 GPU.
Gulu la Google's Threat Analysis Group (TAG), gulu lofufuza za ziwopsezo za cyber, lapeza zambiri zomwe zimayang'ana asakatuli a Chrome ndi Samsung. dzulo. Anazipeza miyezi itatu yapitayo.
Zithunzi
Makamaka, Chrome imakhudzidwa ndi ziwopsezo ziwiri pamaketani awa. Ndipo popeza msakatuli wa Samsung amagwiritsa ntchito injini ya Chromium, idagwiritsidwa ntchito ngati chowombera molumikizana ndi chiwopsezo cha oyendetsa kernel ya Mali GPU. Kuchita izi kumapereka mwayi kwa owukira ku dongosolo.
Kupyolera muzochita zambirizi, obera amatha kugwiritsa ntchito mauthenga a SMS pachipangizocho Galaxy ili ku United Arab Emirates kutumiza maulalo anthawi imodzi. Maulalo awa atha kulozera ogwiritsa ntchito osazindikira kutsamba lomwe lingapereke "mapulogalamu aukazitape ogwira ntchito bwino a Android yolembedwa mu C ++ yomwe imaphatikizapo malaibulale omasulira ndi kujambula deta kuchokera kumacheza osiyanasiyana ndi osatsegula".
Kodi zinthu zili bwanji panopa? Google idayika zovuta ziwirizi zomwe zatchulidwa pa mafoni a Pixel koyambirira kwa chaka chino. Samsung idasintha msakatuli wake wapaintaneti mu Disembala watha, ndikuphwanya zinthu zambiri pogwiritsa ntchito intaneti yozikidwa pa Chromium komanso kusatetezeka kwa kernel ya Mali, komanso kuwukira kwa ogwiritsa ntchito ku United Arab Emirates kukuwoneka kuti kwasiya. Komabe, pali vuto limodzi lalikulu.
Mutha kukhala ndi chidwi ndi
Pomwe mndandanda wazomwe zafotokozedwa ndi gulu la TAG udakhazikitsidwa ndi zosintha za Samsung mu Disembala, ulalo umodzi mu unyolo, womwe umakhudza vuto lalikulu lachitetezo ku Mali (CVE-2022-22706), umakhalabe wosasinthika pazida za Samsung zomwe zili ndi Exynos chipsets ndi Mali GPU. Ndipo izi ngakhale kuti Mali chip maker ARM Holdings adatulutsa kale kukonza cholakwikachi mu Januware chaka chatha.
Mpaka Samsung ikonza nkhaniyi, zida zambiri Galaxy ndi Exynos, idzakhalabe pachiwopsezo chozunzidwa ndi woyendetsa kernel wa Mali. Titha kukhulupirira kuti Samsung itulutsa chigambacho posachedwa (tikuganiza kuti chikhoza kukhala gawo la zosintha zachitetezo cha Epulo).
Chifukwa chake ndikawona zolembazo zitakopedwa kuchokera ku Sammobile ndikungomasuliridwa, sindiyenera kubwera kuno.