Please note : If the corrupted video is received through social media platforms (android 9) like Twitter, WhatsApp, or Messenger, then this work will not work, because the media files are usually compressed and encrypted before sending.
If you have an Android smartphone? you should be careful while downloading or viewing videos from unknown sources online. This is because a vulnerability affecting millions of Android phones can allow hackers to perform malicious code on your smartphone, possibly giving them control of your smartphone.
According to a report from Hacker News, an important remote code execution vulnerability (CVE-2019-2107) affects over one billion smartphones on smartphones running on Android operating system versions between Android 7.0 Nuggets and Android 9.0 Pie, Which can allow a hacker to execute an arbitrary code on a device remotely. The vulnerability in the question remains in the Android media framework and it can allow malicious hackers to gain full control over your smartphone.
Put it simply, play an audio video from an unknown contact or play a video from a suspicious website, allow hackers to access your smartphone using an important vulnerability on your smartphone.
Now, Google has already fixed its vulnerability with dozens of other vulnerabilities in the July update of its Android operating system. This means that if you own a Pixel smartphone then your device is protected from this kind of hack. However, if you own an Android smartphone by another smartphone manufacturer, then it’s likely that you have not received Android updates to fix this critical vulnerability. This is because after the rollout by Google, Android security patches are customized according to the respective platforms by individual device manufacturers.
So, the best way to protect your smartphone from such a hack is to beware of places where you play video and are looking for the latest Android security patches, which will effectively fix this flaw.
But there is a catch. Publishing notes that the attack will not work if the corrupted video is received through social media platforms such as Twitter, WhatsApp, or Messenger because these services usually compress and encrypt media files before sending them.
Meanwhile, the July security update for Android, which was released earlier this month, provides interesting new functionality for pixel smartphones. In addition to improving Pixel smartphones’ OK Google Detection feature and Music detection feature, the July update also fixed a problem, due to which some devices are stuck at boot.