{"id":46637,"date":"2025-09-05T15:20:47","date_gmt":"2025-09-05T08:20:47","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=46637"},"modified":"2025-09-12T15:21:37","modified_gmt":"2025-09-12T08:21:37","slug":"google-va-120-lo-hong-bao-mat-android-hai-lo-hong-dang-bi-khai-thac-trong-thuc-te","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/google-va-120-lo-hong-bao-mat-android-hai-lo-hong-dang-bi-khai-thac-trong-thuc-te\/","title":{"rendered":"Google v\u00e1 120 l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt Android, hai l\u1ed7 h\u1ed5ng \u0111ang b\u1ecb khai th\u00e1c trong th\u1ef1c t\u1ebf"},"content":{"rendered":"<p><b>Google v\u1eeba ph\u00e1t h\u00e0nh b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt Android th\u00e1ng 9 v\u1edbi m\u1ee5c ti\u00eau v\u00e1 t\u1edbi 120 l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt. Trong s\u1ed1 \u0111\u00f3, c\u00f3 hai l\u1ed7 h\u1ed5ng \u0111ang b\u1ecb k\u1ebb t\u1ea5n c\u00f4ng khai th\u00e1c trong c\u00e1c v\u1ee5 t\u1ea5n c\u00f4ng nh\u1eafm v\u00e0o c\u00e1c thi\u1ebft b\u1ecb Android.<\/b><\/p>\n<div>\n<div class=\"bbImageWrapper  js-lbImage\" title=\"1756969491570.png\" data-src=\"https:\/\/whitehat.vn\/attachments\/1756969491570-png.17582\/\" data-lb-sidebar-href=\"\" data-lb-caption-extra-html=\"\" data-single-image=\"1\"><img loading=\"lazy\" decoding=\"async\" class=\"bbImage\" title=\"1756969491570.png\" src=\"https:\/\/whitehat.vn\/attachments\/1756969491570-png.17582\/\" alt=\"1756969491570.png\" width=\"728\" height=\"380\" data-url=\"\" data-zoom-target=\"1\" \/><\/div>\n<p>\u200b<\/p><\/div>\n<p>&nbsp;<\/p>\n<h4>Hai l\u1ed7 h\u1ed5ng \u0111\u00e3 b\u1ecb khai th\u00e1c trong th\u1ef1c t\u1ebf\u200b<\/h4>\n<p>Hai l\u1ed7 h\u1ed5ng ch\u00ednh \u0111\u01b0\u1ee3c Google ph\u00e1t hi\u1ec7n l\u00e0:<\/p>\n<ol>\n<li data-xf-list-type=\"ol\">CVE-2025-38352: \u0110\u00e2y l\u00e0 m\u1ed9t l\u1ed7i t\u0103ng quy\u1ec1n trong Linux Kernel, c\u00f3 th\u1ec3 gi\u00fap k\u1ebb t\u1ea5n c\u00f4ng chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb Android m\u00e0 kh\u00f4ng c\u1ea7n quy\u1ec1n truy c\u1eadp \u0111\u1eb7c bi\u1ec7t. \u0110i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn vi\u1ec7c t\u1ea5n c\u00f4ng h\u1ec7 th\u1ed1ng qua c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng spyware.<\/li>\n<li data-xf-list-type=\"ol\">CVE-2025-48543: L\u1ed7i t\u01b0\u01a1ng t\u1ef1 trong Android Runtime, n\u01a1i c\u00e1c \u1ee9ng d\u1ee5ng Java\/Kotlin v\u00e0 c\u00e1c d\u1ecbch v\u1ee5 h\u1ec7 th\u1ed1ng ch\u1ea1y. L\u1ed7 h\u1ed5ng n\u00e0y cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng v\u01b0\u1ee3t qua c\u00e1c gi\u1edbi h\u1ea1n b\u1ea3o m\u1eadt v\u00e0 ti\u1ebfp c\u1eadn c\u00e1c quy\u1ec1n h\u1ec7 th\u1ed1ng cao h\u01a1n.<\/li>\n<\/ol>\n<p>C\u1ea3 hai l\u1ed7i n\u00e0y kh\u00f4ng y\u00eau c\u1ea7u t\u01b0\u01a1ng t\u00e1c c\u1ee7a ng\u01b0\u1eddi d\u00f9ng \u0111\u1ec3 khai th\u00e1c v\u00e0 Google cho bi\u1ebft ch\u00fang c\u00f3 th\u1ec3 \u0111ang b\u1ecb l\u1ee3i d\u1ee5ng trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng nh\u1eafm m\u1ee5c ti\u00eau.<\/p>\n<h4>C\u00e1c l\u1ed7 h\u1ed5ng quan tr\u1ecdng kh\u00e1c\u200b<\/h4>\n<p>Ngo\u00e0i hai l\u1ed7 h\u1ed5ng \u0111\u00e3 \u0111\u01b0\u1ee3c khai th\u00e1c, b\u1ea3n c\u1eadp nh\u1eadt th\u00e1ng 9 c\u00f2n kh\u1eafc ph\u1ee5c nhi\u1ec1u l\u1ed7i kh\u00e1c, bao g\u1ed3m:<\/p>\n<ul>\n<li data-xf-list-type=\"ul\">CVE-2025-48539: L\u1ed7 h\u1ed5ng cho ph\u00e9p th\u1ef1c thi m\u00e3 t\u1eeb xa (RCE) trong th\u00e0nh ph\u1ea7n System c\u1ee7a Android, c\u00f3 th\u1ec3 b\u1ecb khai th\u00e1c b\u1edfi k\u1ebb t\u1ea5n c\u00f4ng g\u1ea7n thi\u1ebft b\u1ecb (qua Bluetooth ho\u1eb7c Wi-Fi).<\/li>\n<li data-xf-list-type=\"ul\">L\u1ed7i trong Qualcomm v\u00e0 MediaTek: C\u00e1c l\u1ed7 h\u1ed5ng \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn c\u00e1c b\u1ed9 vi x\u1eed l\u00fd Qualcomm v\u00e0 MediaTek, c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn m\u00e3 \u0111\u1ed9c th\u1ef1c thi t\u1eeb xa ho\u1eb7c qu\u1ea3n l\u00fd b\u1ed9 nh\u1edb sai, l\u00e0m cho thi\u1ebft b\u1ecb d\u1ec5 b\u1ecb t\u1ea5n c\u00f4ng t\u1eeb xa m\u00e0 kh\u00f4ng c\u1ea7n s\u1ef1 \u0111\u1ed3ng \u00fd c\u1ee7a ng\u01b0\u1eddi d\u00f9ng.<\/li>\n<\/ul>\n<h4>Khuy\u1ebfn c\u00e1o ng\u01b0\u1eddi d\u00f9ng c\u1ea7n c\u1eadp nh\u1eadt ngay\u200b<\/h4>\n<p>Google \u0111\u00e3 ph\u00e1t h\u00e0nh hai m\u1ee9c v\u00e1 l\u1ed7i: 2025-09-01 v\u00e0 2025-09-05. Ng\u01b0\u1eddi d\u00f9ng Android n\u00ean c\u1eadp nh\u1eadt ngay \u0111\u1ec3 b\u1ea3o v\u1ec7 thi\u1ebft b\u1ecb kh\u1ecfi c\u00e1c nguy c\u01a1 t\u1eeb nh\u1eefng l\u1ed7 h\u1ed5ng n\u00e0y. H\u00e3y v\u00e0o C\u00e0i \u0111\u1eb7t &gt; H\u1ec7 th\u1ed1ng &gt; C\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m &gt; Ki\u1ec3m tra c\u1eadp nh\u1eadt \u0111\u1ec3 n\u00e2ng c\u1ea5p thi\u1ebft b\u1ecb.<\/p>\n<p>\u0110\u1eb7c bi\u1ec7t, ng\u01b0\u1eddi d\u00f9ng Android 12 v\u00e0 c\u0169 h\u01a1n n\u00ean c\u00e2n nh\u1eafc n\u00e2ng c\u1ea5p thi\u1ebft b\u1ecb ho\u1eb7c chuy\u1ec3n sang m\u1ed9t b\u1ea3n ph\u00e2n ph\u1ed1i Android t\u1eeb b\u00ean th\u1ee9 ba \u0111\u1ec3 ti\u1ebfp t\u1ee5c nh\u1eadn c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt.<\/p>\n<p>Google c\u0169ng y\u00eau c\u1ea7u c\u00e1c \u0111\u1ed1i t\u00e1c Android kh\u1ea9n tr\u01b0\u01a1ng v\u00e1 c\u00e1c l\u1ed7 h\u1ed5ng n\u00e0y trong phi\u00ean b\u1ea3n Android c\u1ee7a m\u00ecnh \u0111\u1ec3 b\u1ea3o v\u1ec7 ng\u01b0\u1eddi d\u00f9ng t\u1ed1t h\u01a1n. B\u1ea3o m\u1eadt l\u00e0 m\u1ed9t cu\u1ed9c ch\u01a1i li\u00ean t\u1ee5c, \u0111\u1eebng qu\u00ean ki\u1ec3m tra c\u00e1c b\u1ea3n c\u1eadp nh\u1eadt th\u01b0\u1eddng xuy\u00ean \u0111\u1ec3 an to\u00e0n tr\u00ean th\u1ebf gi\u1edbi s\u1ed1.<\/p>\n<div style=\"text-align: right;\"><b><i>WhiteHat<\/i><\/b><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Google v\u1eeba ph\u00e1t h\u00e0nh b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt Android th\u00e1ng 9 v\u1edbi m\u1ee5c ti\u00eau v\u00e1 t\u1edbi 120 l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt. Trong s\u1ed1 \u0111\u00f3, c\u00f3 hai l\u1ed7 h\u1ed5ng \u0111ang b\u1ecb k\u1ebb t\u1ea5n c\u00f4ng khai th\u00e1c trong c\u00e1c v\u1ee5 t\u1ea5n c\u00f4ng nh\u1eafm v\u00e0o c\u00e1c thi\u1ebft b\u1ecb Android. \u200b &nbsp; Hai l\u1ed7 h\u1ed5ng \u0111\u00e3 b\u1ecb khai [&hellip;]<\/p>\n","protected":false},"author":20,"featured_media":46638,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,35],"tags":[],"class_list":["post-46637","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46637","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=46637"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46637\/revisions"}],"predecessor-version":[{"id":46639,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46637\/revisions\/46639"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/46638"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=46637"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=46637"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=46637"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}