Vulnerabilities are repeatedly discovered in operating systems of smartphones and tablets that make it possible to circumvent the security concept established by the manufacturer and thus access system processes and protected memory areas. This allows programs to obtain unintended authorisations with which they can perform unauthorised actions. For example, the programs could thus access data of the operating system and other apps.
“Jailbreaks” exploit these vulnerabilities as a means of using alternative app stores or other extensions. Jailbreaking techniques can also be used by attackers to install malware or perform other harmful manipulations on a device.
In addition, malware can exploit vulnerabilities to install itself on a device or manipulate it. As a result, the operating system can be used for purposes other than those intended, and important security functions can be bypassed.
Data stored by the mobile operating system in protected areas is particularly affected, as an app with superuser rights may be able to extract it.
Deliberate actions to obtain higher-level rights ("rooting") can create similar threat scenarios if access to privileged rights is not protected.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)