{"id":153878,"date":"2026-01-17T11:12:33","date_gmt":"2026-01-17T09:12:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya"},"modified":"2026-01-17T11:12:33","modified_gmt":"2026-01-17T09:12:33","slug":"uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya","title":{"rendered":"Haavatavus Androidi tarkvaras, mis v\u00f5imaldab koodi k\u00e4itada s\u00f5numi saatmise teel.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google Project Zero meeskonna uurijad on \u00fcksikasjalikult anal\u00fc\u00fcsinud tehnikat, mis v\u00f5imaldab luua t\u00f6\u00f6korras eksploidit, millega saab kaugelt k\u00e4ivitada oma koodi Linuxi tuumaga ja seda SMS- v\u00f5i RCS-s\u00f5numi saatmise kaudu spetsiaalselt vormindatud heliallega. R\u00fcnnak toimib ilma kasutaja mingite toiminguteta, sealhulgas ei n\u00f5ua see saadud s\u00f5numi kuvamist ega kuulamist. <\/p>\n

Eksploidis kasutatakse kahte haavatavust: Dolby Unified Decoder (CVE-2025-54957) raamatukogus ja bigwave draiveris, mis on m\u00f5eldud Linuxi tuuma jaoks (CVE-2025-36934). Varem oli haavatavuste \u00e4rakasutamiseks kodekite osas vajalik, et kasutaja kuuleks v\u00f5i vaataks saadud kahjuliku sisu. Koos AI-abistajate integreerimisega Androidi uusimates v\u00e4ljaannetes dekodeeritakse saadud multimeedia sisu automaatselt p\u00e4rast selle saamist, mis suurendab oluliselt r\u00fcnnakupinda, mida ei n\u00f5ua kasutajanime tegevused (0-click). Heliliste SMS- ja RCS-s\u00f5numite kontekstis loob Google Messagese rakendus automaatselt helis\u00f5numite tekstivaatamiseks vajalikud transkriptsioonid teenuse com.google.android.tts abil, v\u00f5imaldades ilma kasutaja sekkumiseta haavatavusi olemasolevates helikodekites \u00e4ra kasutada. <\/p>\n

Dolby Unified Decoder'i probleem tuleneb t\u00e4isarvu \u00fclevoolust, mis tekib syncframe andmestructuuride kasutamiseks m\u00e4\u00e4ratud puhvri suuruse arvutamisel. See v\u00f5ib v\u00f5imaldada kirjutamist m\u00e4\u00e4ratletud puhvri piiridest v\u00e4lja. \u00dclevoolu tagaj\u00e4rjel v\u00f5ib olla \u00fcle kirjutatud n\u00e4itaja, mida kasutatakse j\u00e4rgmise s\u00fcnkroonimiskadri t\u00f6\u00f6tlemisel, mille muutmine omakorda v\u00f5imaldab r\u00fcndajal kirjutada kontrollitud andmetega funktsiooni n\u00e4itaja ja korraldada koodi t\u00e4itmist 'mediacodec' \u00f5igustega, mis on piiratud l\u00e4bi SELinuxi. <\/p>\n

Linuxi tuuma \u00e4rakasutamiseks kasutati haavatavust bigwave draiveris, mis vastutab s\u00fcmboolse seadme \/dev\/bigwave t\u00f6\u00f6tamise eest, millele p\u00e4\u00e4ses juurde SELinuxi kontekstist 'mediacodec'. Haavatavus v\u00f5imaldas kirjutada tuuma struktuure, manipuleerides BIGO_IOCX_PROCESS ioctl-kutsungiga, ja saavutada koodi t\u00e4itmise tuuma \u00f5igustes. <\/p>\n

Dolby Unified Decoder (libcodec2_soft_ddpdec.so) teinud haavatavus, mis pakub funktsioone Dolby Digital (DD, AC-3) ja Dolby Digital Plusi (DD+, EAC-3) dekodeerimiseks, ei ole spetsiifiline Androidile ega Pixel 9 p\u00fcsivara jaoks ning esineb ka muudel platvormidel (Samsung S24, MacBook Air M1, iPhone 17 Pro, Windows, ChromeOS jne). Androidi AOSP hoidlas ja Samsung S24 p\u00fcsivaras rakendatakse mediacodec konteksti k\u00e4ivitatavatele protsessidele seccomp s\u00fcsteemi kutsungifiltrit, mis raskendab tuvastatud haavatavuste kuritarvitamist. Pixel 9 p\u00fcsivaras sellist filtrit ei olnud. Alates r\u00fcnnakute eest v\u00f5iks kaitsta<\/a> Memory Taggingi (MTE) mehhanism on saadaval ainult Pixel 8+ seadmete puhul, kus see aktiveeritakse 'Advanced Protection' re\u017eiimi sisse l\u00fclitamisega. macOSis ja iOSis on \u00e4ra kasutamist raskendav lisatud 'fbounds-safety' lipuga teegi kompileerimine, mis rakendab t\u00e4iendavaid massiivi piiride kontrollimisi, mis v\u00e4hendavad j\u00f5udlust. <\/p>\n

Uurijad k\u00e4sitlevad eraldi probleeme, mis on seotud raha viimisega kasutajateni Dolby Unified Decoder haavatavuse parandamiseks. Teave haavatavuse kohta avalikustati avalikult 82 p\u00e4eva enne paranduse toimetamist Pixel seadmete kasutajateni. Dolby ettev\u00f5tet teavitati probleemist 26. juunil 2025. Esimene binaarne parandus vabastati 18. septembril ChromeOS-i jaoks, kuid Android seadmetele andis Dolby binaarsed plaastrid alles 8. oktoobril. 15. oktoobril avalikustati teave haavatavuse kohta. 12. novembril vabastas Samsung paranduse ning 5. jaanuaril avaldati parandus Pixel seadmete jaoks. Parandi levitamine k\u00f5igi Android seadmete jaoks v\u00f5ttis aega 139 p\u00e4eva. <\/p>\n

Dolby Unified Decoder'is tuvastati haavatavus v\u00e4hem kui kahe p\u00e4eva jooksul ja BigWave draiveris v\u00e4hem kui \u00fche p\u00e4eva jooksul. T\u00f6\u00f6j\u00f5u hind, et v\u00e4lja t\u00f6\u00f6tada t\u00f6\u00f6kindel eksploit Dolby Unified Decoder'i haavatavuse jaoks, on hinnatud kaheks n\u00e4dalaks \u00fche teadlase t\u00f6\u00f6 ajal, BigWave jaoks aga kolmeks n\u00e4dalaks. 14. oktoobril avaldatud Dolby aruandes nimetati Dolby Unified Decoder'i haavatavus madala riskitaseme alla, vaatamata detaile arendatava eksploit kohta h\u00f5lmavamale teabele. BigWave haavatavusele anti Androidis keskmine riskitase, p\u00f5hjendades seda sellega, et r\u00fcnnak on v\u00f5imalik ainult privileegitud sisu kaudu ja pole kergesti k\u00e4ttesaadav privileege mittetavaliste kontekstide jaoks (kolme kuu p\u00e4rast muudeti haavatavuse staatust 'ohtlik probleem').
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430 Linux, \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 SMS- \u0438\u043b\u0438 RCS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u0432\u0443\u043a\u043e\u0432\u044b\u043c \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f. \u0412 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-153878","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Androidi tarkvaraga seotud haavatavus, mis v\u00f5imaldab koodi k\u00e4ivitamist s\u00f5numi saatmise kaudu | ProHoster","description":"Google Project Zero meeskonna teadlased on \u00fcksikasjalikult anal\u00fc\u00fcsinud t\u00f6\u00f6liku eksploitatsiooni loomise tehnikaid, mis v\u00f5imaldab kaugelt k\u00e4ivitada oma koodi Linuxi tuumaga \u00f5igustes, saates SMS- v\u00f5i RCS-s\u00f5numi spetsiaalse sisuga.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android-\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430 Linux, \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 SMS- \u0438\u043b\u0438 RCS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-01-17T09:12:33+00:00","article:modified_time":"2026-01-17T09:12:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"153878","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 15:57:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-20 14:13:19","updated":"2026-01-24 15:57:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/153878","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=153878"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/153878\/revisions"}],"predecessor-version":[{"id":154931,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/153878\/revisions\/154931"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=153878"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=153878"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=153878"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}