World-writable memory on Samsung Android phones
World-writable memory on Samsung Android phones
[Security] Posted Dec 17, 2012 14:34 UTC (Mon) by corbet
Here's a
report on the xda-developers site stating that Samsung Android phones
have an interesting feature added to the kernel: a /dev/exynos-mem
device, world-writable, that gives access to all physical memory on the handset.
"The good news is we can easily obtain root on these devices and the
bad is there is no control over it.
" Owners of such phones might
want to be especially careful about which software they install for a
little while.