1
[CLOSED]CVE-2019-2232, permanent DOS Of your phone (IOW, your phone might as well be bricked)

Thread Status:
Not open for further replies.
  1. Fenderluvr
    Eclair Dec 7, 2019

    Fenderluvr , Dec 7, 2019 :
    when will a patch be available for the OnePlus 5 to fix this Android vulnerability, which in essence, bricks your phone.

    https://www-forbes-com.cdn.ampproje...-9-and-10-permanent-denial-of-service-threat/

    Vuln details:

    https://android.googlesource.com/platform/frameworks/base/ /4ce901e4058d93336dca3413dc53b81bbdf9d3e8

    Android Security Bulletin—December 2019:

    https://source.android.com/security/bulletin/2019-12-01

    This a VERY serious vulnerability, so I'm hoping OnePlus is already working on a patch.

    thx
     

    #1
    johncd3141 likes this.
  2. Carman00
    Gingerbread Dec 8, 2019

    Carman00 , via OnePlus 5T , Dec 8, 2019 :
    Whats the point of making this thread? People that care about this stuff check CVE Bulletins themselves. you don't need to tell everyone there is a vulnerability. nothing is unhackable or unexploitable. Everything has its flaws its just a matter of time when those flaws are found. Oneplus frequently releases security updates even for older devices so a fix will definitely come just give it some time.
     

    #2
  3. CosmoKramer70
    Jelly Bean Dec 8, 2019

    CosmoKramer70 , Dec 8, 2019 :
    Or you can refer to the patching cycle that OP have provided for us ages ago... posting this wont make it come any faster.
    Also you realise that you are basically posting a redundant thread asking when the next update is available but in a crafty way. Dont do that...
     

    #3
    eye842 and Waveform Modifier like this.
  4. Fenderluvr
    Eclair Dec 8, 2019

    Fenderluvr , Dec 8, 2019 :


    Carman00

    Whats the point of making this thread? People that care about this stuff check CVE Bulletins themselves. you don't need to tell everyone there is a vulnerability. nothing is unhackable or unexploitable. Everything has its flaws its just a matter of time when those flaws are found. Oneplus frequently releases security updates even for older devices so a fix will definitely come just give it some time.​


    There are MANY news articles about this issue, so get your head out of sand. Exploiters already know about it. And ppl who don't, should, because it is a very serious exploit.
     
    Last edited: Dec 8, 2019

    #4
  5. Fenderluvr
    Eclair Dec 8, 2019

    Fenderluvr , Dec 8, 2019 :


    CosmoKramer70

    Or you can refer to the patching cycle that OP have provided for us ages ago... posting this wont make it come any faster.
    Also you realise that you are basically posting a redundant thread asking when the next update is available but in a crafty way. Dont do that...​


    It's not a redundant thread. And if it gets OnePlus to release a patch sooner - which they should, then I am perfectly happy with my post. If you can't find anything positive or helpful to say on this thread, then don't reply. And don't presume to tell me what I can and cannot do - here or anywhere.
     
    Last edited: Dec 8, 2019

    #5
    ACT43277 likes this.
  6. CosmoKramer70
    Jelly Bean Dec 9, 2019

    CosmoKramer70 , Dec 9, 2019 :
    Technically it is cause you are asking for the next update. Which is against the forums rules, as you should know what the patching cycle is. Being that the vulnerability was released in the December security patch by Google, so OP will release the update when its ready, why should they rush this and break other things in order to satisfy YOUR needs.
    As so am i, i'm perfectly happy with my post, as you should know of the patching cycle and im perfectly happy telling you what you should or shouldn't be doing, as per the forums rules. If you have issues with it then bring it up with an admin.
     

    #6
    Mr_Cyrox and Waveform Modifier like this.
  7. SoniaB
    Nougat Senior Moderator Dec 9, 2019

    SoniaB , Dec 9, 2019 :
    Security Patches are provided via the build updates.

    There are no ETAs. No one will know what security patch will be provided in the next update until the update is released.

    Answered and thread closed
     

    #7
    Bouncer71 likes this.
  8. K1514355410599
    Cupcake Dec 10, 2019

    K1514355410599 , Dec 10, 2019 :
    New flaw revealed December in Google's security bulletin,
    Is one plus 5T getting the december security patch, the threat which is recently been discovered.
     

    #8
  9. Rohan_S_P
    Honeycomb Dec 10, 2019


    #9
    V1552681019661 likes this.
  10. Waveform Modifier
    Marshmallow Dec 10, 2019

    Waveform Modifier , Dec 10, 2019 :
    Please use search and read the forum before posting redundant thread. This had already been discussed and don't need another redundant thread. Updated will be ready when it is ready.
     

    #10
  11. Madnezz4Ever
    Jelly Bean Dec 10, 2019

    Madnezz4Ever , Dec 10, 2019 :
    They'll probably release a patch towards the end of the month. Security patches are normally released every other month.

    No one here knows for sure either as this is a user only forum.
     

    #11
  12. Tornado Surya , via OnePlus 6T McLaren Edition , Dec 10, 2019 :
    Google's latest security bulletin (for December 2019) has 'bad news' for Android smartphone users. The advisory names three security flaws, one of which Google has termed as "most severe". For, it can permanently brick your Android smartphones. Here's all you need to know about this 'dangerous threat'
     

    #12
    ACT43277 and B1555003985047 like this.

  13. #13
    ACT43277 likes this.
  14. Tornado Surya , via OnePlus 6T McLaren Edition , Dec 10, 2019 :
    The biggest problem here is that not all Android smartphones receive timely security updates. Many do, but not as quickly as they should. Many old ones don't even receive security patches. Smartphone users with older Android devices and many with not-so-known brands may not get the patch at all.

    Installing December security update as soon as it is available can help.
     

    #14
    ACT43277 likes this.
  15. G_plusone
    Marshmallow Dec 10, 2019

    G_plusone , Dec 10, 2019 :
    Why are copy pasting an article ( most likely ) without posting a source .

    Don't worry as long as you don't install Questionable application from non trustable sources and don't visit shady sites you would be fine
     

    #16
    otto2 and Bouncer71 like this.
  16. Bouncer71
    OnePlus 7 Pro Sample Shot Photographer Dec 10, 2019


    #17
    G_plusone and otto2 like this.