![[article image]](https://cacm.acm.org/system/assets/0003/6056/112519_Robert_Rodriguez_google-assistant-promo-layer.large.jpg?1574705056&1574705056 "The flaws affected Android devices using app permissions.")
Researchers at cybersecurity company Checkmarx reported flaws in the Google Assistant on Android devices that would allow hackers to take photos and videos without users' knowledge.
The flaws affected Android devices using app permissions; a demonstration showed a malicious weather app would appear to give forecasts while instructing Google Assistant to shoot photos or video via a background voice request.
Checkmarx alerted Google and Samsung to the issue in July, and the companies released a patch in a Play Store update.
Checkmarx's Erez Yalon said the vulnerability also could have permitted location tracking and eavesdropping, since most photos automatically log global positioning system coordinates in image metadata.
From CNet
View Full Article
Abstracts Copyright © 2019 SmithBucklin, Washington, DC, USA
