Kompania ARM zbuloi informacione p\u00ebr tre vulnerabilitete n\u00eb drejtuesit p\u00ebr GPU-t\u00eb e saj, t\u00eb p\u00ebrdorura n\u00eb Android, ChromeOS dhe shp\u00ebrndarjet e Linux-it. Vulnerabilitetet lejojn\u00eb p\u00ebrdoruesin lokal pa privilegje t\u00eb ekzekutoj\u00eb kodin e tij me t\u00eb drejtat e b\u00ebrtham\u00ebs. N\u00eb raportin e tetorit mbi problemet e siguris\u00eb n\u00eb platform\u00ebn Android p\u00ebrmendet se deri n\u00eb daljen e nj\u00eb rregullimi, nj\u00eb nga vulnerabilitetet (CVE-2023-4211) tashm\u00eb ishte shfryt\u00ebzuar nga haker\u00ebt n\u00eb eksploitat aktive p\u00ebr sulme t\u00eb targetuara (0-day). P\u00ebr shembull, vulnerabiliteti mund t\u00eb p\u00ebrdoret n\u00eb aplikacione t\u00eb d\u00ebmshme t\u00eb shp\u00ebrndara p\u00ebrmes burimeve t\u00eb dyshimta p\u00ebr t\u00eb fituar akses t\u00eb plot\u00eb n\u00eb sistem dhe p\u00ebr t\u00eb instaluar komponente q\u00eb spiunojn\u00eb p\u00ebrdoruesin. <\/p>\n
Vulnerabilitetet e gjetura: <\/p>\n
Rregullimi \u00ebsht\u00eb gjithashtu ofruar n\u00eb p\u00ebrb\u00ebrje t\u00eb azhurnimeve t\u00eb shtatorit p\u00ebr deg\u00ebt e Chrome OS 114\/115\/116 dhe azhurnimin e tetorit t\u00eb Android-it. Modelet e vulnerabilizuara t\u00eb GPU p\u00ebrdoren n\u00eb smartphone-t Google Pixel 7, Samsung S20 dhe S21, Motorola Edge 40, OnePlus Nord 2, Asus ROG Phone 6, Redmi Note 11, 12, Honor 70 Pro, RealMe GT, Xiaomi 12 Pro, Oppo Find X5 Pro, Reno 8 Pro dhe disa pajisje me \u00e7ipet Mediatek. <\/p>\n
N\u00eb raportin e tetorit mbi vulnerabilitetet n\u00eb Android p\u00ebrmenden 53 vulnerabilitete, nga t\u00eb cilat 5 iu \u00ebsht\u00eb dh\u00ebn\u00eb niveli kritik i rrezikut, nd\u00ebrsa t\u00eb tjerat \u2014 niveli i lart\u00eb i rrezikut. Problemet kritike lejojn\u00eb nj\u00eb sulm n\u00eb distanc\u00eb p\u00ebr ekzekutimin e kodit n\u00eb sistem. Problemet e markuara si t\u00eb rrezikshme lejojn\u00eb kandidatur\u00ebn e kodit n\u00eb kontekstin e nj\u00eb procesi me privilegje p\u00ebrmes manipulimeve me aplikacionet lokale. Tre probleme kritike (CVE-2023-24855, CVE-2023-28540 dhe CVE-2023-33028) jan\u00eb identifikuar n\u00eb komponent\u00ebt pron\u00ebsor\u00eb t\u00eb Qualcomm dhe dy (CVE-2023-40129, CVE-2023-4863) n\u00eb sistem (n\u00eb libwebp dhe n\u00eb stack Bluetooth). N\u00eb t\u00ebr\u00ebsi, jan\u00eb identifikuar 5 vulnerabilitete n\u00eb komponent\u00ebt ARM, 3 n\u00eb MediaTek, 1 n\u00eb Unisoc dhe 17 n\u00eb Qualcomm (raporti nga Qualcomm). Dy vulnerabilitete (nj\u00eb n\u00eb GPU ARM dhe nj\u00eb n\u00eb libwebp) jan\u00eb sh\u00ebnuar si tashm\u00eb t\u00eb p\u00ebrdorura nga sulmuesit n\u00eb eksploitat e tyre (0-day). \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ARM \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 GPU, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 Android, ChromeOS \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043e\u0442\u0447\u0451\u0442\u0435 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u0445 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Android \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0434\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2023-4211) \u0443\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110410","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsit\u00eb n\u00eb driverin e GPU ARM, t\u00eb p\u00ebrdorura tashm\u00eb p\u00ebr t\u00eb kryer sulme | ProHoster","description":"Kompania ARM ka zbuluar informacion mbi tre dob\u00ebsi n\u00eb driverat p\u00ebr GPU-t\u00eb e saj, t\u00eb p\u00ebrdorura n\u00eb Android, ChromeOS dhe shp\u00ebrndarjet e Linux-it.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-drajvere-k-gpu-arm-uzhe-primenyaemye-dlya-soversheniya-atak","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u043a GPU ARM, \u0443\u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ARM \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0442\u0440\u0451\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 GPU, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 Android, ChromeOS \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-drajvere-k-gpu-arm-uzhe-primenyaemye-dlya-soversheniya-atak","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-04T06:10:47+00:00","article:modified_time":"2023-10-04T06:10:47+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/110410","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=110410"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/110410\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=110410"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=110410"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=110410"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"