A new type of security vulnerability has been found in the Android systems updating process. It can be exploited to steal sensitive data, alter security configurations and even block installation of critical system services. The researchers have informed Google and major Android vendors of their findings. The vulnerability exists in all official Android versions and all 3,522 customized source code versions by Samsung, LG and HTC that we inspected, the study says. The tests reveal exploit opportunities across different device manufacturers, carriers and countries.”]

