Experts Found a Unicorn in the Heart of Android

Zimperium disclosed the "Stagefright" Android media-library vulnerabilities that allow unauthenticated remote code execution—potentially via MMS without user interaction—affecting an estimated 95% of Android devices (~950 million). Multiple CVEs were assigned, patches were submitted to Google and vendors, and mitigations (zIPS protection, disabling MMS auto-fetch, OTA firmware updates) were recommended while noting delays in vendor patch deployment.