RAMpage: The Latest Rowhammer-esque Android Vulnerability

On June 28 researchers disclosed "RAMpage," a Rowhammer-derived Android vulnerability that abuses the ION memory allocator on devices dating from ~2012 onward. While researchers released theoretical details sufficient for a skilled adversary, no proof-of-concept exploit has been published and Google states it is not aware of in-the-wild exploitation; Zimperium claims its zIPS product can detect and block related privilege escalation and malware attempts without requiring updates.