• Google Pixel vulnerability allows bad actors to undo Markup screenshot edits and redactions

    10 days ago - By Engadget

    When Google began rolling out Android's March security patch earlier this week , the company addressed a “High” severity vulnerability involving the Pixel's Markup screenshot tool. Over the weekend, Simon Aarons and David Buchanan , the reverse engineers who discovered CVE-2023-21036, shared more information about the security flaw, revealing Pixel users are still at risk of their older images being compromised due to the nature of Google's oversight. In short, the “aCropalypse” flaw allowed someone to take a PNG screenshot cropped in Markup and undo at least some of the edits in the...
    Read more ...

     

  • Google Pixel exploit reverses edited parts of screenshots

    Google Pixel exploit reverses edited parts of screenshots

    10 days ago - By The Verge

    Photo by Amelia Holowaty Krales / The Verge
    A security flaw affecting the Google Pixel's default screenshot editing utility, Markup, allows images to become partially “unedited,” potentially revealing the personal information users chose to hide, as spotted earlier by 9to5Google and Android Police. The vulnerability, which was discovered by reverse engineers Simon Aaarons and David Buchanan, has since been patched by Google but still has widespread implications for the edited screenshots shared prior to the update.
    As detailed in a thread Aaarons posted on Twitter , the aptly-named...
    Read more ...