Cross-Signed Certificates Crash Android

When a specially-constructed malformed certificate is introduced into an Android device, the system may behave in unexpected ways. It may either slow down or hang the device until it is forced to reboot. The vulnerability is caused by two common used classes in the Android framework – the JarFile and KeyStore classes. Any Android features implicitly or explicitly using the either of two classes may be at the risk to be attacked by cross-signed certificates.

Read more here – http://blog.trendmicro.com/trendlabs-security-intelligence/cross-signed-certificates-crashes-android/

Leave a Comment

Your email address will not be published.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top