Reflecting on Stagefright Patches

Zimperium's report analyzes the Stagefright media-processing vulnerabilities affecting Android (notably CVE-2015-3864 and several follow-ups), estimating hundreds of millions of devices remain vulnerable worldwide, documenting patching gaps and regressions across vendors, noting remote RCE exploitation vectors (browser- and MMS-based), evidence of 0-day use in the wild and ASLR-bypass techniques, and recommending detection, blocking and mitigation measures for carriers, vendors and organizations.