[Sophos]Anatomy of a file format problem - yet another code verification bypass in Android

[igor51]

Anatomy of a file format problem - yet another code verification bypass in Android

Four months ago, the Android platform was stirred, if not shaken, by a pair of code verification holes.

Turns out there was a third one, now fixed in Android 4.4, better known as Kit Kat.

Paul Ducklin looks at what we can learn from it...
Source: Anatomy of a file format problem - yet another code verification bypass in Android