{"id":153878,"date":"2026-01-17T11:12:33","date_gmt":"2026-01-17T09:12:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya"},"modified":"2026-01-17T11:12:33","modified_gmt":"2026-01-17T09:12:33","slug":"uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya","title":{"rendered":"Ranljivost v Android programski opremi, ki omogo\u010da izvajanje kode preko po\u0161iljanja sporo\u010dila.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Raziskovalci iz ekipe Google Project Zero so podrobno preu\u010dili tehniko za ustvarjanje delujo\u010dega eksploita, ki omogo\u010da oddaljeno izvajanje lastne kode z dovoljenji jedra Linux, prek po\u0161iljanja SMS- ali RCS-sporo\u010dila s posebej oblikovanim zvo\u010dnim prilogom. Napad se izvede brez kakr\u0161negakoli ukrepanja uporabnika, vklju\u010dno s tem, da ne zahteva ogledovanja ali poslu\u0161anja prejetega sporo\u010dila. <\/p>\n

V eksploitu sta vklju\u010deni dve ranljivosti: v knji\u017enici Dolby Unified Decoder (CVE-2025-54957) in v gonilniku bigwave za jedro Linux (CVE-2025-36934). Prej je bilo za izkori\u0161\u010danje ranljivosti v kodekih potrebno, da uporabnik poslu\u0161a ali ogleda prejeti zlonamerni vsebinski material. Po integraciji AI pomo\u010dnikov v zadnjih razli\u010dicah Android razli\u010dic se prejeti multimedijski material samodejno dekodira po prejemu, kar znatno pove\u010duje povr\u0161ino napadov, ki ne zahtevajo ukrepanja uporabnika (0-click). V kontekstu zvo\u010dnih SMS- in RCS-sporo\u010dil aplikacija Google Messages s pomo\u010djo storitve com.google.android.tts samodejno oblikuje transkripcijo za uporabo na zvo\u010dnih sporo\u010dilih pri iskanju po besedilu, kar omogo\u010da izkori\u0161\u010danje ranljivosti v obstoje\u010dih zvo\u010dnih kodekih brez sodelovanja uporabnika. <\/p>\n

Te\u017eava v Dolby Unified Decoder je posledica celotnega \u0161tevila prelitja pri izra\u010dunu velikosti predpomnilnika za obdelane strukture podatkov syncframe, kar se lahko izkoristi za pisanje izven dodeljenega predpomnilnika. Zaradi prelitja lahko pride do prepisovanja kazalca, ki se uporablja pri obdelavi naslednjega sinhronizacijskega okvirja, kar omogo\u010da napadalcu, da prepi\u0161e kazalec funkcije in izvr\u0161i svoj kodo s pravicami \u00abmediacodec\u00bb, omejenimi preko SELinux. <\/p>\n

Za izkori\u0161\u010danje ranljivosti jedra Linux se je uporabila ranljivost v gonilniku bigwave, ki je odgovoren za delovanje simbolskega naprave \/dev\/bigwave, do katerega je bil omogo\u010den dostop iz SELinux konteksta \u00abmediacodec\u00bb. Ranljivost je omogo\u010dila prepisovanje struktur jedra s manipulacijo z ioctl klicem BIGO_IOCX_PROCESS in dosego izvr\u0161evanja kode s pravicami jedra. <\/p>\n

Ranljivost v knji\u017enici Dolby Unified Decoder (libcodec2_soft_ddpdec.so), ki omogo\u010da dekodiranje formatov Dolby Digital (DD, AC-3) in Dolby Digital Plus (DD+, EAC-3), ni specifi\u010dna za Android in programsko opremo za Pixel 9, temve\u010d se pojavlja tudi na drugih platformah (Samsung S24, MacBook Air M1, iPhone 17 Pro, Windows, ChromeOS itd.). V Android repozitoriju AOSP in programski opremi za Samsung S24 se za procese, zagnane v kontekstu mediacodec, uporablja seccomp-filter sistemskih klicev, ki ote\u017euje nadaljnje izkori\u0161\u010danje ranljivosti v jedru. V programski opremi za Pixel 9 tak filter ni bil prisoten. Od napadov bi za\u0161\u010ditil<\/a> Mehanizem Memory Tagging (MTE) je dostopen le za naprave Pixel 8+ kot opcija, ki se aktivira ob vklopu na\u010dina \u00abAdvanced Protection\u00bb. V macOS in iOS je izkori\u0161\u010danje ote\u017eeno zaradi sestavljanja knji\u017enice z zastavico \u00ab-fbounds-safet\u00bb, ki dodaja dodatne preverjanja za \u010dezmejno dostopanje do tabel, kar zmanj\u0161a zmogljivost. <\/p>\n

Raziskovalci posebej obravnavajo te\u017eave s prenosom popravkov za ranljivost v Dolby Unified Decoder do uporabnikov. Podatki o ranljivosti so bili javno razkriti 82 dni pred prenosom popravka do uporabnikov naprav Pixel. Podjetje Dolby je bilo obve\u0161\u010deno o te\u017eavi 26. junija 2025. Prvo binarno popravilo je bilo izdano 18. septembra za ChromeOS, vendar je podjetje Dolby za naprave Android ponudilo binarne popravke \u0161ele 8. oktobra. 15. oktobra je bila javno razkrita informacija o ranljivosti. 12. novembra je Samsung izdal popravilo, in \u0161ele 5. januarja je bilo objavljeno popravilo za naprave Pixel. \u0160iritev popravka za vse naprave Android je zahtevala 139 dni. <\/p>\n

V Dolby Unified Decoder je bila ranljivost odkrita v manj kot dveh dneh, v gonilniku BigWave pa v manj kot enem dnevu pregleda. Delavni vlo\u017eki za razvoj delujo\u010dega exploit-a za ranljivost v Dolby Unified Decoder so ocenjeni na 8 tednov pri delu enega raziskovalca, za BigWave pa 3 tedne. V objavljenem 14. oktobra poro\u010dilu podjetja Dolby je bila ranljivost v Dolby Unified Decoder ozna\u010dena kot nizka stopnja nevarnosti, kljub prenosu podrobnosti o razvijajo\u010dem se exploit-u. Ranljive to\u010dke v BigWave so bile v Androidu dodeljene srednji stopnji nevarnosti (Moderate), pri \u010demer so to utemeljili z dejstvom, da je napad mogo\u010d le iz privilegiranega vsebin in je nedostopen za neprivilegirane kontekste (po treh mesecih je bil status ranljivosti spremenjen v \u00abnevarno vpra\u0161anje\u00bb).
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430 Linux, \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 SMS- \u0438\u043b\u0438 RCS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u0432\u0443\u043a\u043e\u0432\u044b\u043c \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0431\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f. \u0412 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-153878","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ranljivost v Androidovem vdelanem programu, ki omogo\u010da izvr\u0161itev kode s po\u0161iljanjem sporo\u010dila | ProHoster","description":"Raziskovalci iz ekipe Google Project Zero so podrobno obravnavali tehniko izdelave delujo\u010dega eksploita, ki omogo\u010da daljno izvr\u0161itev lastne kode z pravicami jedra Linux, preko po\u0161iljanja SMS- ali RCS-sporo\u010dila s posebno","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android-\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Google Project Zero \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430 Linux, \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 SMS- \u0438\u043b\u0438 RCS-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/uyazvimost-v-android-proshivke-pozvolyayushhaya-vypolnit-kod-cherez-otpravku-soobshheniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-01-17T09:12:33+00:00","article:modified_time":"2026-01-17T09:12:33+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"153878","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 15:57:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-20 14:13:19","updated":"2026-01-24 15:57:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/153878","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=153878"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/153878\/revisions"}],"predecessor-version":[{"id":154931,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/153878\/revisions\/154931"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=153878"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=153878"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=153878"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}