Android Security Undermined by OEMs

Researchers at Aalto University found that Android OEMs frequently relax Google’s SEAndroid confinement policies in Lollipop devices—relying on default domains, sharing broad allow rules across apps, and leaving obsolete or auto-generated drivers—creating misconfigurations that increase attackers’ opportunities; a related Cambridge study notes roughly 88% of Android devices remain exposed to at least one known critical vulnerability.