Google Pixel vulnerability permits unhealthy actors to undo Markup screenshot edits and redactions

When Google started rolling out Android’s , the corporate addressed a “Excessive” severity vulnerability involving the Pixel’s Markup screenshot instrument. Over the weekend, and , the reverse engineers who found CVE-2023-21036, shared extra details about the safety flaw, revealing Pixel customers are nonetheless vulnerable to their older pictures being compromised because of the nature of Google’s oversight.

Briefly, the “aCropalypse” flaw allowed somebody to take a PNG screenshot cropped in Markup and undo at the very least a few of the edits within the picture. It’s straightforward to think about situations the place a foul actor may abuse that functionality. For example, if a Pixel proprietor used Markup to redact a picture that included delicate details about themselves, somebody may exploit the flaw to disclose that data. You will discover the technical particulars on .

Based on Buchanan, the flaw has existed for about 5 years, coinciding with the discharge of Markup alongside . And therein lies the issue. Whereas March’s safety patch will forestall Markup from compromising future pictures, some screenshots Pixel customers might have shared up to now are nonetheless in danger.

It’s onerous to say how involved Pixel customers needs to be concerning the flaw. Based on a forthcoming Aarons and Buchanan shared with and , some web sites, together with Twitter, course of pictures in such a approach that somebody couldn’t exploit the vulnerability to reverse edit a screenshot or picture. Customers on different platforms aren’t so fortunate. Aarons and Buchanan particularly determine Discord, noting the chat app didn’t patch out the exploit till its current January seventeenth replace. For the time being, it’s unclear if pictures shared on different social media and chat apps have been left equally weak.

Google didn’t instantly reply to Engadget’s request for remark and extra data. The March safety replace is at the moment accessible on the Pixel 4a, 5a, 7 and seven Professional, which means Markup can nonetheless produce weak pictures on some Pixel gadgets. It’s unclear when Google will push the patch to different Pixel gadgets. If you happen to personal a Pixel telephone with out the patch, keep away from utilizing Markup to share delicate pictures.

Trending Merchandise


We will be happy to hear your thoughts

Leave a reply

Welcome to ThePoshNook, where we offer elegant and high-quality Amazon products carefully curated to align with your needs and elevate your lifestyle. We feature only the finest items and strive to be your go-to resource for discovering sophisticated and unique finds. Please note that some of the products we recommend may earn us a commission through sponsored links. It’s our commitment to present only the most exceptional and useful items for our customers. Thanks for stopping by and exploring our selection!

Register New Account
Compare items
  • Total (0)
Shopping cart