GhostMap Android flaw lets malicious app trigger persistent boot loop
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Romanian security firm Bitdefender disclosed "GhostMap," a flaw in Android that lets a malformed, permission-free app force devices into a persistent boot loop simply by being installed. The bug stems from two libraries parsing ZIP compression differently, which lets an APK map memory beyond the file's contents.