<story><title>Android Phones Can Be Hacked Remotely by Viewing Malicious PNG Image</title><url>https://source.android.com/security/bulletin/2019-02-01.html</url></story><parent_chain></parent_chain><comment><author>trulyrandom</author><text>It&amp;#x27;s kind of ridiculous that my Google Nexus 5X, which was released just over 3 years ago, will not receive updates to patch vulnerabilities like this anymore.</text></comment>
<story><title>Android Phones Can Be Hacked Remotely by Viewing Malicious PNG Image</title><url>https://source.android.com/security/bulletin/2019-02-01.html</url></story><parent_chain></parent_chain><comment><author>fulafel</author><text>If you follow the monthly Android Security Bulletin, there has been a long stream fixes for remote-code-execution vulnerablities in codec implementations. It got big in 2015 when the Stagefright branded vulnerability got some publicity, and they continued testing &amp;amp; have continued to fix an endless stream of codec vulns ever since.&lt;p&gt;There was also a Bluetooth RCE in this month&amp;#x27;s bulletin. And in November there was yet another round of WiFi pwnage, this time in Qualcomm WiFi (CVE-2018-11905). It&amp;#x27;s all quite bad.</text></comment>