At the end of last week in Google Detailed news about the security patch android March 2023, which fixed a bug in modems. exynos which makes many smartphones vulnerable to hackers. Now Security Explorer Simon Aarons claims that with this update, the manufacturer solves another drawback of smartphones pixelswhich allow attackers to gain access to compromising data in screenshots.

Privacy vulnerability in Google Pixel screenshots

Is called ‘acropalypse‘, these privacy vulnerabilities are found in the smartphone screenshot editing tool. According to the researcher, edits made by users using the tool markup allows you to partially restore a screenshot without editing by the user.

Due to this issue, fixed in the March security patch from android, attackers can gain access to sensitive data hidden by the user. To illustrate what this vulnerability is, Aarons sent an image of a credit card with hidden numbers via Discordthanks to a flaw in the editing application, it is possible to restore the image without the black bar, fully revealing the card information:

Credits: Reproduction / Simon Aarons

As indicated Android control, the restore image process operation only works if the image is sent by specific applications. This is because the major social networks re-process and compress images before sending them to other users. Makes the process of removing bands and edits impossible.

Although this vulnerability is fixed Google in the new security patch for pixelsscreenshots uploaded before the update will still be editable by attackers.

Mundo Conectado Deal Center: Selection of Discounts and Lowest Prices
Best deals on electronics, cell phones, TVs, soundbars, drones and more

Via: Android Authority Source: Simon Aarons

…..