from TrendLabs Security Intelligence Blog
On March 18, Google published a security advisory for a critical vulnerability CVE-2015-1805 that applied to rooting apps. This bug allows malicious apps to gain “root” access to all Android phones below kernel version 3.18. This can greatly affect devices that no longer receive patches, or those with long rollout time. Initially, this flaw has been tagged as ‘medium’ in terms of severity. However, a zero-day exploit was found out that showed the vulnerability could still be exploited successfully, compromising the security of the device. As such, the level of severity was changed to ‘critical.’
Post from: Trendlabs Security Intelligence Blog - by Trend Micro
Critical ‘CVE-2015-1805’ Vulnerability Allows Permanent Rooting of Most Android Phones
