A massive security flaw is putting 950 million Android users at risk

A huge security vulnerability in Android has been uncovered by a researcher, who revealed that devices can be hijacked using nothing more than a simple MMS message. The exploit is believed to affect almost all Android devices currently in use today, including those running all versions of the OS from Android 2.2 FroYo onwards. Joshua Drake, VP of platform research and exploitation at mobile security specialists Zimperium, discovered several vulnerabilities in a core component of the OS called ‘Stagefright’, which is used to play, create and edit multimedia files. He describes this latest Android security flaw as “the worst Android vulnerabilities discovered to date”, adding that “if ‘Heartbleed’ from the PC era sends [a] chill down your spine, this is much worse. He found that some of these vulnerabilities could be exploited to remotely run code on the device, simply by receiving an MMS message, or by watching a specially constructed video file in a web browser, or even viewing a seemingly innocent web page with embedded media content.