Home / Technology / Android Exploit Locks Phones in Crash Loop
Android Exploit Locks Phones in Crash Loop
5 Nov
Summary
- A new Android exploit, GhostMap, can cause devices to crash and restart.
- The exploit exploits a ZIP file mishandling flaw within the Android OS.
- A factory reset is the only fix, leading to data loss.
A critical vulnerability known as GhostMap has been identified in the Android operating system, capable of forcing devices into a persistent crash loop. This exploit leverages a flaw in how Android processes specific ZIP file entries, leading to a SIGBUS signal that crashes the device. The loop is so severe it can persist even in safe mode, rendering a factory reset the only solution. This action, however, means all user data will be lost.
Prior to a full reset, users with USB debugging enabled could potentially mitigate the GhostMap exploit by connecting their device to a computer and using the Android Debug Bridge to remove the offending files. Researchers at Bitdefender discovered this vulnerability and have reported it to Google. Google has indicated that the issue is beyond the scope of a typical security update, suggesting a fix may not arrive until a future version, potentially as late as Android 18 in 2027.
While the exploit has not been found in any public applications yet, its public disclosure by Bitdefender could either expedite a Google fix or alert malicious actors to its existence. Android users are advised to download applications only from trusted sources and to thoroughly research app authenticity and reviews to identify potential risks.
