GhostMap: The Android flaw that crashes your phone before you open the app

7 points by strugee


riking

Why give a full embargo period if they said it's not considered a security problem? Full disclosure immediately

schuelermine

I am not that familiar with APK/Android internals, but from messing around with it tangentially, mostly via ordinary apps that just do weird things with the package manager, and not through ADB, I’ve found that the Android package manager gets into weird corner cases surprisingly easily.

I have hit a case where an app was simultaneously not installed (not listed in Settings, and couldn’t be uninstalled from the Play store), but also blocked sideloading the app from another source because the signature didn’t match with the “already installed” version.
This resolved itself after waiting for a while.

I’ve also got into a situation where a secondary user a work profile app created was present but invisible and undeleteable, necessitating the use of ADB.