Bitdefender Labs researchers discovered a significant Android vulnerability called GhostMap, where installing a specially crafted APK can trap the phone in an unrecoverable crash loop without ever opening or running the app. The bug stems from Android mishandling two ZIP entry fields—the compression method and declared uncompressed length—which maps unallocated memory and triggers a SIGBUS crash. The only recovery option is a factory reset, which erases all user data.
Background
Android applications are packaged as APK files using ZIP compression, and the system relies on proper parsing of these archives during installation. This vulnerability exploits a fundamental assumption about ZIP file integrity that Android's package parser incorrectly trusts.
- Source
- Lobsters
- Published
- Nov 8, 2026 at 02:12 AM
- Score
- 7.0 / 10