logo

GhostMap: The Android flaw that crashes your phone before you open the app

ID: 627625c7-53cd-55a8-9a85-8562c9dccb64

STIX ID: report--627625c7-53cd-55a8-9a85-8562c9dccb64

Feed Name: Bitdefender Labs

Threat Score
70/100

Date Published: 2026-11-05

Date Updated: 2026-11-05

Author: Alecsandru Cătălin DAJ

...
...

**Executive summary:** Bitdefender Labs discovered and analyzed "GhostMap", a parser-differential vulnerability in Android APK/ZIP handling that lets a specially crafted app (no permissions, no executable code) cause SIGBUS faults and persistent system_server crash loops; the issue can render devices unusable until a factory reset (data loss), affects Android 10 and above, was reproduced on Pixel 10 (Android 17), and was reported to Google but classified outside the scope of a security update at time of publication.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.