Beware, just installing a single app can put your phone in an endless loop of crashes - Samsung Magazine

Bitdefender researchers have uncovered a critical vulnerability in the Android operating system that can be triggered by a single malicious application. The flaw, dubbed GhostMap, causes the device to enter an endless loop of crashes, rendering it completely unusable.

The vulnerability was first identified in August during an investigation into a malicious APK file targeting online banking. Researchers discovered that the creators were abusing the way Android opens ZIP files, causing the system_server process to crash.

Google's initial rejection

The researchers reported the issue through Google's Android & Devices Vulnerability Reward Program, but Google initially rejected the report. They only admitted the bug after a closer examination and forwarded the findings to a relevant team for assessment.

No fix yet

Despite the admission, Google has not released a fix for the GhostMap vulnerability. This leaves all Android device owners exposed to potential exploitation, as the bug can still be triggered with a specially modified APK file.

The researchers have made the vulnerability public, but the exact exploitation method was not disclosed. This could still inspire hackers to attempt to trick users into downloading infected files, as malicious apps can disguise themselves as legitimate applications.