Check Point yaona kusazvibata muALAC (Apple Lossless Audio Codec) odhiyo yekumanikidza fomati decoder inopihwa neMediaTek (CVE-2021-0674, CVE-2021-0675) uye Qualcomm (CVE-2021-30351). Dambudziko rinobvumira kurwisa kodhi kuti iitwe kana uchigadzira yakanyatso kurongeka data muALAC fomati.
Ngozi yekusagadzikana inowedzerwa nenyaya yekuti inokanganisa zvishandiso zvinomhanyisa Android chikuva chine MediaTek uye Qualcomm chips. Nekuda kwekurwiswa, munhu anorwisa anogona kuronga kuurayiwa kwemalware pane mudziyo unokwanisa kuwana mushandisi kutaurirana uye multimedia data, kusanganisira data kubva kamera. Inofungidzirwa kuti 2/3 yevashandisi vese ve-smartphone vanobva papuratifomu yeAroid vanobatwa nedambudziko. Semuyenzaniso, muUS, chikamu chese cheese mafoni eAndroid akatengeswa muchikamu chechina cha4 akatumirwa neMediaTek uye Qualcomm machipisi aive 2021% (95.1% - MediaTek, 48.1% - Qualcomm).
Tsanangudzo yekushandiswa kwekusagadzikana haisati yaburitswa, asi zvinonzi MediaTek uye Qualcomm zvikamu zveiyo Android platform zvakatsikwa muna Zvita 2021. Chirevo chaZvita pamusoro pekusagadzikana mupuratifomu yeAroid yakaratidza nyaya sekusagadzikana kwakakosha muzvikamu zvevaridzi zveQualcomm chips. Kusagadzikana muMediaTek zvikamu hazvina kutaurwa mumishumo.
Kusagadzikana kunonakidza nekuda kwemidzi yako. Muna 2011, Apple yakavhura kodhi kodhi yeALAC codec, iyo inobvumira kudzvanywa kwedhata redhiyo pasina kurasikirwa kwemhando, pasi perezinesi reApache 2.0, uye yakaita kuti zvikwanise kushandisa ese patent ane chekuita nekodeki. Iyo kodhi yakabudiswa asi yakasiiwa isina kuchengetedzwa uye haina kuchinjwa kwemakore gumi nerimwe apfuura. Panguva imwecheteyo, Apple yakaramba ichitsigira zvakasiyana kushandiswa kunoshandiswa mumapuratifomu ayo, kusanganisira kubvisa zvikanganiso uye kusagadzikana mairi. MediaTek neQualcomm yakavakirwa yavo ALAC codec kuita pane yekutanga yakavhurika sosi kodhi yeApple, asi haina kusanganisira kusasimba kwakagadziriswa mukuitwa kweApple mumachira avo.
Iko hakuna ruzivo parizvino nezvekusagadzikana mune kodhi yezvimwe zvigadzirwa zvinoshandisa zvekare ALAC kodhi. Semuenzaniso, iyo ALAC fomati yakatsigirwa kubva FFmpeg 1.1, asi iyo kodhi ine decoder kuita inochengetedzwa.
Source: opennet.ru