Preinstalled SwiftKey app can own some Samsung phones
by from Techreport on (#BG1S)
Mobile security company NowSecure has reported a vulnerability in the SwiftKey keyboard app preinstalled on some Samsung phones, which could allow an attacker to perform privileged remote code execution. That roughly translates to "anything goes," and NowSecure claims that over 600 million devices may be impacted.
The bug affects the Samsung Galaxy S4, S5, and S6 handset lines. Only US carrier versions are listed, but it's possible that versions around the world are similarly affected. ...