{"id":153878,"date":"2026-01-17T11:12:33","date_gmt":"2026-01-17T09:12:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya"},"modified":"2026-01-17T11:12:33","modified_gmt":"2026-01-17T09:12:33","slug":"uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya","title":{"rendered":"Androidi p\u00fcsivara haavatavus, mis v\u00f5imaldab koodi t\u00e4itmist s\u00f5numi saatmise kaudu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google Project Zero meeskonna teadlased on \u00fcksikasjalikult uurinud tehnikaid, mis v\u00f5imaldavad luua toimiva eksploitatsiooni, mis v\u00f5imaldab kauget koodi k\u00e4itada Linuxi kerneli \u00f5igustes, saates SMS- v\u00f5i RCS-s\u00f5numi spetsiaalselt vormindatud helifailiga. R\u00fcnnak toimub ilma kasutaja tegevuseta, sealhulgas ei n\u00f5ua saadetud s\u00f5numi vaatamist ega kuulamist. <\/p>\n

Ekspluiteeritakse kahte haavatavust: Dolby Unified Decoder'i teegis (CVE-2025-54957) ja Linuxi tuuma bigwave draiveris (CVE-2025-36934). Varasemalt oli haavatavuste \u00e4rakasutamiseks vajalik, et kasutaja kuulaks v\u00f5i vaataks saadud pahatahtlikku sisu. P\u00e4rast AI-abistajate integreerimist viimastes Androidi versioonides dekodeeritakse saadud multimeedia sisu automaatselt p\u00e4rast saamist, mis oluliselt suurendab r\u00fcnde pinnast, mis ei vaja kasutaja sekkumist (0-click). Helik\u00f5nede ja RCS-s\u00f5numite kontekstis genereerib Google Messages rakendus koos teenusega com.google.android.tts automaatselt transkriptsiooni, et rakendada helis\u00f5numite tekstip\u00f5hist otsingut, v\u00f5imaldades kasutaja sekkumiseta haavatavuste \u00e4rakasutamist olemasolevates helikoodekites. <\/p>\n

Probleem Dolby Unified Decoderis on p\u00f5hjustatud t\u00e4isarvude \u00fclet\u00e4itumisest, kui arvutatakse puhvri suurust syncframe'i andmestruktuuride t\u00f6\u00f6tlemiseks, mis v\u00f5ib v\u00f5imaldada kirjutamist sellele, mis on antud p\u00f6\u00f6rdel. \u00dclet\u00e4itumise t\u00f5ttu v\u00f5ib \u00fcle kirjutada n\u00e4idiku, mida kasutatakse j\u00e4rgmise s\u00fcnkroonimiskadri t\u00f6\u00f6tlemisel, mille muutmine omakorda v\u00f5imaldab kirjutada r\u00fcndaja kontrollitava sisuga funktsiooni n\u00e4idiku ja korraldada oma koodi t\u00e4itmise 'mediacodec' \u00f5igustes, mis on piiratud SELinuxi kaudu. <\/p>\n

Linuxi tuumas kasutati haavatavust bigwave draiveris, mis vastutab seadme \/dev\/bigwave t\u00f6\u00f6tamise eest, millele lubati juurdep\u00e4\u00e4s SELinuxi 'mediacodec' konteksti kaudu. Haavatavus v\u00f5imaldas tuuma struktuuride \u00fclekirjutamist, manipuleerides BIGO_IOCX_PROCESS ioctl-kutsumisega ja saavutada koodi t\u00e4itmine tuuma \u00f5igustega. <\/p>\n

Veauslikkus Dolby Unified Decoder'i (libcodec2_soft_ddpdec.so) teegis, mis pakub Dolby Digital (DD, AC-3) ja Dolby Digital Plus (DD+, EAC-3) formaatide dekodeerimise funktsioone, ei ole spetsiifiline Androidile ega Pixel 9 firmware'ile, ja ilmneda ka muudel platvormidel (Samsung S24, MacBook Air M1, iPhone 17 Pro, Windows, ChromeOS jne). Androidi AOSP repo ja Samsung S24 firmware puhul rakendatakse mediacodec kontekstis jooksvale protsessile seccomp s\u00fcsteemik\u00f5nede filtrit, mis raskendab tuvastatud haavatavuste kuritarvitamist tuumas. Pixel 9 firmware'is sellist filtrit ei olnud. r\u00fcnnakute eest kaitseks v\u00f5iks toimida<\/a> Memory Tagging (MTE) mehhanism on saadaval ainult Pixel 8+ seadmetes valikuna, mis aktiveeritakse 'Advanced Protection' re\u017eiimi sissel\u00fclitamisel. macOS-is ja iOS-is on ekspluateerimist keeruline, kuna teeki kompileeritakse ' -fbounds-safet' sildi all, mis lisab t\u00e4iendavad massiivide \u00fclet\u00e4itumise kontrollid, mis v\u00e4hendavad j\u00f5udlust. <\/p>\n

Uurijad k\u00e4sitlevad eraldi probleemide ilmnemist, mis on seotud haavatavuse parandamise viimisega kasutajateni Dolby Unified Decoderis. Teave haavatavuse kohta avalikustati 82 p\u00e4eva enne paranduse j\u00f5udmist Pixel-seadmete kasutajateni. Firma Dolby sai probleemist teada 26. juunil 2025. Esimene binaarne parandus anti v\u00e4lja 18. septembril ChromeOS-i jaoks, kuid Android-seadmete jaoks esitas Dolby binaarsed pat\u0161id alles 8. oktembril. 15. oktoobril avalikustati teave haavatavuse kohta. 12. novembril vabastas Samsung paranduse ja ainult 5. jaanuaril avaldati parandused Pixel-seadmete jaoks. Pat\u0161i levitamine k\u00f5igile Android-seadmetele kestis 139 p\u00e4eva. <\/p>\n

Dolby Unified Decoderis tuvastati haavatavus v\u00e4hem kui kahe p\u00e4eva jooksul ning BigWave draiveris v\u00e4hem kui \u00fche p\u00e4eva jooksul. T\u00f6\u00f6koormuse hindamine t\u00f6\u00f6riista eksploiteerimise v\u00e4ljat\u00f6\u00f6tamiseks Dolby Unified Decoderi haavatavuse jaoks on hinnatud 8 n\u00e4dalat \u00fche teadlase t\u00f6\u00f6tamisega, BigWave puhul aga 3 n\u00e4dalat. 14. oktoobril avaldatud Dolby aruandes kirjeldati Dolby Unified Decoderi haavatavust kui madala ohu tasemega, hoolimata detailide edastamisest arendatava eksploiteerimise kohta. BigWave haavatavusele anti Androidis keskmine ohu tase (Moderate), p\u00f5hjendades seda sellega, et r\u00fcnnak on v\u00f5imalik ainult privileege omavas sisus ja mitte privileegideta kontekstidest (kolme kuu p\u00e4rast muudeti haavatavuse staatus 'ohtlikuks probleemiks').
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430 Linux, \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 SMS- \u0438\u043b\u0438 RCS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u0432\u0443\u043a\u043e\u0432\u044b\u043c \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f. \u0412 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-153878","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Androidi p\u00fcsivara haavatavus, mis v\u00f5imaldab koodi k\u00e4ivitada s\u00f5numi saatmise teel | ProHoster","description":"Google Project Zero meeskonna teadlased on \u00fcksikasjalikult anal\u00fc\u00fcsinud tehnikat, mis v\u00f5imaldab luua t\u00f6\u00f6dist, mille abil saab kaugelt k\u00e4ivitada oma koodi Linuxi tuumaga \u00f5igustes, saates SMS- v\u00f5i RCS-s\u00f5numi spetsiaalselt vormindatud helifailiga. R\u00fcnnak toimub ilma kasutaja sekkumiseta, sealhulgas ei n\u00f5ua see saadetud s\u00f5numi vaatamist v\u00f5i kuulamist. Eksploidis on kaasatud kaks haavatavust: teegis.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android-\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430 Linux, \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 SMS- \u0438\u043b\u0438 RCS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u0432\u0443\u043a\u043e\u0432\u044b\u043c \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f. \u0412 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-01-17T09:12:33+00:00","article:modified_time":"2026-01-17T09:12:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"153878","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 15:57:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-20 14:13:19","updated":"2026-01-24 15:57:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/153878","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=153878"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/153878\/revisions"}],"predecessor-version":[{"id":154931,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/153878\/revisions\/154931"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=153878"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=153878"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=153878"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}