MediaTek has officially confirmed the existence of a software bug that has put several Android devices running the company's chipsets at risk. The chip-maker says the issue in question only affects Android 4.4 KitKat devices.
First reported by security researcher Justin Case earlier this month, the bug could potentially allow an attacker to enable root access on a vulnerable device. "Root user could do many things, such as access data normally protected from the user/ other apps, or brick the phone, or spy on the user, monitor communications etc," Case said.
For its part, MediaTek explained that the vulnerability stems from a debug feature that the chip-maker said smartphone manufacturers should have disabled before shipping the devices.
"We are aware of this issue and it has been reviewed by MediaTek's security team. It was mainly found in devices running Android 4.4 KitKat, due to a de-bug feature created for telecommunication inter-operability testing in China," a MediaTek spokesperson said.
"After testing, phone manufacturers should disable the de-bug feature before shipping smartphones. However, after investigation, we found that a few phone manufacturers didn't disable the feature, resulting in this potential security issue."
MediaTek, however, didn't provide anymore details, just saying that the issue affects "a portion of devices" from "certain manufacturers," and adding that it has alerted all manufacturers about the feature.
This happened to one of my friends. Still no fix for that. What happens is due to root access, the phone installs lots of unwanted apps. It consumes all of your data, and installs malicious apps constantly. You cannot uninstall such apps, it sh...
Chinese manufacturers have not been asked to provide back doors for the Chinese government. US manufacturers such as Cisco, Fortinet and Juniper have. Mediatek is mostly known for cheap hardware that never gets updated.
Well, actually I have a cybernetics university degree. I hope this will take away your remarks on big data and cybercriminality. For instance I never used and I will never use Facebook or any open social network. Ever. By the way, you made me cu...