Check Point yaona kusazvibata muALAC (Apple Lossless Audio Codec) odhiyo yekumanikidza fomati decoder inopihwa neMediaTek (CVE-2021-0674, CVE-2021-0675) uye Qualcomm (CVE-2021-30351). Dambudziko rinobvumira kurwisa kodhi kuti iitwe kana uchigadzira yakanyatso kurongeka data muALAC fomati.
Njodzi yekusagadzikana iyi inowedzera nekuti inokanganisa michina iri kushandisa puratifomu iyi. Android, ine MediaTek neQualcomm chips. Nekuda kwekurwiswa uku, murwisi anogona kushandisa malware pamudziyo uyu, achishandisa data rekutaurirana remushandisi uye multimedia, kusanganisira data rekamera. Zvinofungidzirwa kuti zvikamu zviviri muzvitatu zvevashandisi vese vemafoni vanoshandisa puratifomu iyi vanokanganiswa nedambudziko iri. AndroidSemuenzaniso, muUS, huwandu hwese hwemotokari dzese dzakatengeswa mukota yechina ya2021 Android- mafoni akapihwa MediaTek nemachipisi eQualcomm akasvika 95.1% (48.1% - MediaTek, 47% - Qualcomm).
Ruzivo rwekuti kusasimba uku kunoshandiswa sei haruna kuziviswa, asi zvinonzi zvikamu zveMediaTek neQualcomm zvepuratifomu iyi. Android Kugadziriswa kwakaitwa muna Zvita 2021. Mumushumo weZvita wekusagadzikana kwepuratifomu Android Matambudziko aya akaonekwa sekusagadzikana kukuru muzvikamu zveQualcomm chips. Kusagadzikana muzvikamu zveMediaTek hakuna kutaurwa mumishumo.
Kusagadzikana kunonakidza nekuda kwemidzi yako. Muna 2011, Apple yakavhura kodhi kodhi yeALAC codec, iyo inobvumira kudzvanywa kwedhata redhiyo pasina kurasikirwa kwemhando, pasi perezinesi reApache 2.0, uye yakaita kuti zvikwanise kushandisa ese patent ane chekuita nekodeki. Iyo kodhi yakabudiswa asi yakasiiwa isina kuchengetedzwa uye haina kuchinjwa kwemakore gumi nerimwe apfuura. Panguva imwecheteyo, Apple yakaramba ichitsigira zvakasiyana kushandiswa kunoshandiswa mumapuratifomu ayo, kusanganisira kubvisa zvikanganiso uye kusagadzikana mairi. MediaTek neQualcomm yakavakirwa yavo ALAC codec kuita pane yekutanga yakavhurika sosi kodhi yeApple, asi haina kusanganisira kusasimba kwakagadziriswa mukuitwa kweApple mumachira avo.
Iko hakuna ruzivo parizvino nezvekusagadzikana mune kodhi yezvimwe zvigadzirwa zvinoshandisa zvekare ALAC kodhi. Semuenzaniso, iyo ALAC fomati yakatsigirwa kubva FFmpeg 1.1, asi iyo kodhi ine decoder kuita inochengetedzwa.
Source: opennet.ru
