Stagefright: One Year Later

Zimperium's year-later review of the Stagefright Android vulnerability summarizes the original discovery and disclosure timeline, the technical severity (remote code execution through specially crafted MMS/media processing often requiring no user interaction), the large scale of impact (nearly one billion devices affected with hundreds of millions vulnerable), subsequent industry and regulatory responses (Google patches, Android Security Bulletins, Zimperium Handset Alliance) and the continued exposure from slow or fragmented patch deployment leaving many users unprotected.