ืืื ืื Qmage ืืืื ืคึผืจืึทืกืขืกืขืจ ืกืึทืคึผืืืื ืืื Samsung ืึทื ืืจืืื ืคืืจืืืืึทืจืข, ืืขืืืื ืืื ืื Skia ืืจืึทืคืืงืก ืจืขื ืืขืจืื ื ืกืืกืืขื, (CVE-2020-8899), ืืืึธืก ืึทืืึทืื ืืืจ ืฆื ืึธืจืืึทื ืืืืจื ืงืึธื ืืืจืืคืืจืื ื ืืืขื ืคึผืจืึทืกืขืกืื ื ืืืืืขืจ ืืื QM ืืื QG (".qmg") ืคึฟืึธืจืืึทืืืจืื ืืขื ืืื ืงืืื ืึทืคึผืืึทืงืืืฉืึทื. ืฆื ืืืจืืคืืจื ืึทื ืืึทืคืึทืื, ืืขืจ ืืึทื ืืฆืขืจ ืืึทืจืฃ ื ืืฉื ืืืจืืคืืจื ืงืืื ืึทืงืฉืึทื ื; ืืื ืื ืกืืืคึผืืึทืกื ืคืึทื, ืขืก ืืื ืืขื ืื ืฆื ืฉืืงื ืื ืงืึธืจืื ืึท MMS, E- ืืจืืื ืึธืืขืจ ืฉืืืขืก ืึธื ืืึธื ืืื ืึท ืกืคึผืขืฉืื ืืืืืื ื ืืืื.
ืืขืจ ืคึผืจืึธืืืขื ืืื ืืขืืืื ื ืฆื ืืืื ืคืึธืจืฉืืขืื ืืื ื 2014, ืกืืึทืจืืื ื ืืื ืคืืจืืืืึทืจืข ืืืืืจื ืืืืฃ ืึทื ืืจืืื 4.4.4, ืืืึธืก ืฆืืืขืืขืื ืขื ืืขืจืื ืืขื ืฆื ืฉืขืคึผื ื ืึธื QM, QG, ASTC ืืื PIO (PNG ืืืึทืจืืึทื ื) ืืืื ืคึฟืึธืจืืึทืืืจืื ืืขื. ืืืึทืื ืขืจืึทืืืืืื ะฒ ืกืึทืืกืื ื ืคืืจืืืืึทืจืข ืืืคืจืืื ืืืืฃ ืืื 6. ืื ืืืืคึผื ืึทื ืืจืืื ืคึผืืึทืืคืึธืจืืข ืืื ืคืืจืืืืึทืจืข ืคืื โโืื ืืขืจืข ืืึทื ืืึทืคืึทืงืืฉืขืจืขืจื ืืขื ืขื ื ืืฉื ืึทืคืขืงืืึทื ืืืจื ืืขื ืคึผืจืึธืืืขื.
ืืขืจ ืคึผืจืึธืืืขื ืืื ืืขืืืขื ืืืืขื ืึทืคืืื ืืขืฉืึทืก ืคืึทื ืืขืกืืื ื ืืืจื ืึทื ืื ืืฉืขื ืืจ ืคืื Google, ืืืึธืก ืืืื ืคึผืจืืืื ืึทื ืื ืืืึทืื ืขืจืึทืืืืืื ืืื ื ืืฉื ืืืืืืขื ืฆื ืงืจืึทืฉืื ืืื ืฆืืืขืืจืืื ืึท ืืจืืขืื ืคึผืจืึธืืืึทืืืืคึผ ืคืื ืึท ืืืืืจืข ืืืึธืก ืืืืคึผืึทืกืื ASLR ืฉืืฅ ืืื ืืึธื ืืฉืื ืื ืงืึทืืงืืืึทืืึธืจ ืืืจื ืฉืืงื ืึท ืกืขืจืืข ืคืื โโMMS ืึทืจืืืงืืขื ืฆื ืึท ืกืึทืืกืื ื. Galaxy Note 10+ ืกืืึทืจืืคืึธื ืข ืืื ืื ืคึผืืึทืืคืึธืจืืข ืึทื ืืจืืื 10.
ืืื ืืขื ืืืึทืฉืคึผืื ืืขืืืืื, ืืฆืืื ืขืงืกืคึผืืืืืืืฉืึทื ืคืืจืืื ืื ืืขืขืจืขื 100 ืืื ืื ืฆื ืืึทืคืึทืื ืืื ืฉืืงื ืืืืขืจ 120 ืึทืจืืืงืืขื. ืืขืจ ืืืืืจืข ืืืฉืืืื ืคืื ืฆืืืื ืคึผืึทืจืฅ - ืืื ืืขืจ ืขืจืฉืืขืจ ืืื ืข, ืฆื ืืืืคึผืึทืก ASLR, ืื ืืึทืืข ืึทืืจืขืก ืืื ืืืฉืืืกื ืืื ืื libskia.so ืืื libhwui.so ืืืืืจืขืจืื, ืืื ืืื ืื ืจืืข ืืื ืข, ืืืืึทื ืึทืงืกืขืก ืฆื ืื ืืืื ืืื ืฆืืืขืฉืืขืื ืืืจื ืืึธื ืืฉืื ื ืื "ืคืึทืจืงืขืจื" ืฉืึธื". ืืขืคึผืขื ืืื ื ืืืืฃ ืื ืืืงืึธืจื ืืืืกืืืื, ืื ืืึทืฉืืืืขื ืื ืืึทืืข ืึทืืจืขืก ืจืืงืืืืืขืจื ืฉืืงื ืคืื 75 ืฆื 450 ืึทืจืืืงืืขื.
ืืื ืืขืจืฆื, ืขืก ืงืขื ืขื ืืืื ืืืืขืจืงื ืงืขื ืฉืืขืื ืืืืขืจืืืื ืคืืงืกืื ืคึฟืึทืจ ืึทื ืืจืืื, ืืืึธืก ืคืึทืจืคืขืกืืืงื 39 ืืืึทืื ืขืจืึทืืืืืืื. ืืจืื ืืฉืื ืืึธืื ืฉืืื ืึทืกืืื ื ืึท ืงืจืืืืฉ ืืืจืื ืคืื ืืขืคืึทืจ (ืคืจืืื ืืขื ืขื ื ืึธื ื ืืฉื ืืืกืงืืึธืืื):
- CVE-2020-0096 ืืื ืึท ืืืืข ืืืึทืื ืขืจืึทืืืืืื ืืืึธืก ืึทืืึทืื ืงืึธื ืืืจืืคืืจืื ื ืืืขื ืคึผืจืึทืกืขืกืื ื ืึท ืกืคึผืขืฉืื ืืืืืื ื ืืขืงืข);
- CVE-2020-0103 ืืื ืึท ืืืืึทื ืืืึทืื ืขืจืึทืืืืืื ืืื ืื ืกืืกืืขื ืืืึธืก ืึทืืึทืื ืงืึธื ืืืจืืคืืจืื ื ืืืขื ืคึผืจืึทืกืขืกืื ื ืกืคึผืขืฉืึทืื ืืืืืื ื ืคืื ืืจืืืกื ืืืง ืืึทืื);
- CVE-2020-3641 ืืื ืึท ืืืึทืื ืขืจืึทืืืืืื ืืื Qualcomm ืคึผืจืึทืคึผืจืืืึทืืขืจื ืงืึทืืคึผืึธืื ืึทื ืฅ).
ืืงืืจ: opennet.ru