{"id":10511,"date":"2025-10-21T13:25:33","date_gmt":"2025-10-21T06:25:33","guid":{"rendered":"https:\/\/infosec.new88088.net\/?p=10511"},"modified":"2026-02-05T13:25:41","modified_gmt":"2026-02-05T06:25:41","slug":"lo-hong-zero-click-trong-dolby-ddp-co-the-dan-den-tan-cong-tu-xa-tren-android","status":"publish","type":"post","link":"https:\/\/infosec.new88088.net\/2025\/10\/21\/lo-hong-zero-click-trong-dolby-ddp-co-the-dan-den-tan-cong-tu-xa-tren-android\/","title":{"rendered":"L\u1ed7 h\u1ed5ng zero-click trong Dolby DDP c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn t\u1ea5n c\u00f4ng t\u1eeb xa tr\u00ean Android"},"content":{"rendered":"<p><b>M\u1ed9t l\u1ed7 h\u1ed5ng v\u1eeba \u0111\u01b0\u1ee3c c\u00e1c chuy\u00ean gia c\u1ee7a Google Project Zero c\u00f4ng b\u1ed1, li\u00ean quan \u0111\u1ebfn c\u00f4ng ngh\u1ec7 \u00e2m thanh Dolby Digital Plus \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng r\u1ed9ng r\u00e3i trong h\u1ec7 sinh th\u00e1i thi\u1ebft b\u1ecb di \u0111\u1ed9ng, \u0111\u1eb7c bi\u1ec7t l\u00e0 Android. \u0110i\u1ec1u \u0111\u00e1ng s\u1ee3 l\u00e0 k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 g\u1eedi m\u1ed9t \u0111o\u1ea1n \u00e2m thanh d\u01b0\u1edbi d\u1ea1ng tin nh\u1eafn RCS v\u00e0 n\u1ea1n nh\u00e2n kh\u00f4ng c\u1ea7n m\u1edf hay ph\u00e1t file \u00e2m thanh, thi\u1ebft b\u1ecb v\u1eabn t\u1ef1 \u0111\u1ed9ng x\u1eed l\u00fd v\u00e0 c\u00f3 th\u1ec3 b\u1ecb chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n t\u1eeb xa.<\/b><\/p>\n<div style=\"text-align: center\"><a class=\"js-lbImage\" style=\"cursor: pointer\" href=\"https:\/\/whitehat.vn\/attachments\/1761021835174-png.17765\/\" target=\"_blank\" rel=\"noopener\" data-lb-sidebar-href=\"\" data-lb-caption-extra-html=\"\" data-fancybox=\"lb-thread-18851\" data-caption=\"&lt;h4&gt;1761021835174.png&lt;\/h4&gt;&lt;p&gt;&lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;whitehat.vn&amp;#x2F;threads&amp;#x2F;lo-hong-zero-click-trong-dolby-ddp-co-the-dan-den-tan-cong-tu-xa-tren-android.18851&amp;#x2F;#post-44369&quot; class=&quot;js-lightboxCloser&quot;&gt;WhiteHat Team \u00b7 21&amp;#x2F;10&amp;#x2F;2025 l\u00fac 11:48 AM&lt;\/a&gt;&lt;\/p&gt;\"><img fetchpriority=\"high\" decoding=\"async\" class=\"bbImage \" title=\"1761021835174.png\" src=\"https:\/\/whitehat.vn\/data\/attachments\/18\/18100-01a988a4eb3dce49699fbc1e412a8137.jpg\" alt=\"1761021835174.png\" width=\"712\" height=\"400\" \/><\/a>\u200b<\/div>\n<p>L\u1ed7 h\u1ed5ng mang t\u00ednh \u201czero-click\u201d, \u0111\u1eb7t h\u00e0ng tri\u1ec7u thi\u1ebft b\u1ecb Android v\u00e0o t\u00ecnh th\u1ebf nguy hi\u1ec3m nh\u01b0 t\u1eebng x\u1ea3y ra v\u1edbi c\u00e1c v\u1ee5 Pegasus hay Stagefright tr\u01b0\u1edbc \u0111\u00e2y.<\/p>\n<p>Hai chuy\u00ean gia b\u1ea3o m\u1eadt Ivan Fratric v\u00e0 Natalie Silvanovich thu\u1ed9c nh\u00f3m nghi\u00ean c\u1ee9u l\u1ed7 h\u1ed5ng c\u1ea5p cao c\u1ee7a Google \u0111\u00e3 ph\u00e1t hi\u1ec7n l\u1ed7i trong DDPlus Unified Decoder, b\u1ed9 gi\u1ea3i m\u00e3 \u0111\u01b0\u1ee3c d\u00f9ng \u0111\u1ec3 x\u1eed l\u00fd c\u00e1c g\u00f3i d\u1eef li\u1ec7u \u00e2m thanh Dolby Digital Plus (.ec3, .mp4\u2026).<\/p>\n<p>L\u1ed7 h\u1ed5ng n\u00e0y xu\u1ea5t ph\u00e1t t\u1eeb m\u1ed9t l\u1ed7i ghi tr\u00e0n b\u1ed9 nh\u1edb, do tr\u00e0n s\u1ed1 nguy\u00ean trong b\u01b0\u1edbc t\u00ednh to\u00e1n \u0111\u1ed9 d\u00e0i d\u1eef li\u1ec7u, d\u1eabn \u0111\u1ebfn vi\u1ec7c c\u1ea5p ph\u00e1t v\u00f9ng nh\u1edb b\u1ecb thi\u1ebfu. H\u1eadu qu\u1ea3 l\u00e0 qu\u00e1 tr\u00ecnh ghi d\u1eef li\u1ec7u ti\u1ebfp theo v\u01b0\u1ee3t kh\u1ecfi gi\u1edbi h\u1ea1n v\u00e0 c\u00f3 th\u1ec3 ghi \u0111\u00e8 l\u00ean c\u00e1c c\u1ea5u tr\u00fac quan tr\u1ecdng, bao g\u1ed3m c\u1ea3 \u0111o\u1ea1n b\u1ed9 nh\u1edb ch\u1ee9a con tr\u1ecf th\u1ef1c thi. Khi \u0111\u00f3, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 ch\u00e8n m\u00e3 \u0111\u1ed9c v\u00e0 khi\u1ebfn thi\u1ebft b\u1ecb th\u1ef1c thi theo \u00fd mu\u1ed1n.<\/p>\n<p>C\u00e1ch th\u1ee9c khai th\u00e1c th\u00ec l\u1ea1i qu\u00e1 \u0111\u01a1n gian, ch\u1ec9 c\u1ea7n g\u1eedi tin nh\u1eafn \u00e2m thanh. \u0110i\u1ec3m \u0111\u00e1ng lo ng\u1ea1i nh\u1ea5t l\u00e0 tr\u00ean Android, h\u1ec7 th\u1ed1ng tin nh\u1eafn nh\u01b0 Google Messages s\u1ebd t\u1ef1 \u0111\u1ed9ng gi\u1ea3i m\u00e3 file \u00e2m thanh RCS \u0111\u1ec3 ph\u1ee5c v\u1ee5 ch\u1ee9c n\u0103ng chuy\u1ec3n gi\u1ecdng n\u00f3i th\u00e0nh v\u0103n b\u1ea3n. \u0110i\u1ec1u n\u00e0y \u0111\u1ed3ng ngh\u0129a v\u1edbi vi\u1ec7c:<\/p>\n<ul>\n<li data-xf-list-type=\"ul\">Ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng c\u1ea7n m\u1edf file \u00e2m thanh<\/li>\n<li data-xf-list-type=\"ul\">Kh\u00f4ng c\u1ea7n nh\u1ea5n \u201cph\u00e1t\u201d<\/li>\n<li data-xf-list-type=\"ul\">Kh\u00f4ng c\u1ea7n t\u1ea3i xu\u1ed1ng th\u1ee7 c\u00f4ng<\/li>\n<li data-xf-list-type=\"ul\">Ch\u1ec9 c\u1ea7n file \u0111\u01b0\u1ee3c g\u1eedi \u0111\u1ebfn thi\u1ebft b\u1ecb v\u00e0 n\u1eb1m trong h\u1ec7 th\u1ed1ng x\u1eed l\u00fd \u00e2m thanh, qu\u00e1 tr\u00ecnh ph\u00e2n t\u00edch s\u1ebd k\u00edch ho\u1ea1t l\u1ed7i.<\/li>\n<\/ul>\n<p>Trong qu\u00e1 tr\u00ecnh th\u1eed nghi\u1ec7m, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u \u0111\u00e3 s\u1eed d\u1ee5ng m\u1ed9t file \u0111\u01b0\u1ee3c \u0111\u1eb7t t\u00ean \u201cdolby_android_crash.mp4\u201d v\u00e0 ch\u1ec9 c\u1ea7n \u0111\u01b0a file n\u00e0y v\u00e0o cache c\u1ee7a \u1ee9ng d\u1ee5ng tin nh\u1eafn \u0111\u1ec3 g\u1eedi, thi\u1ebft b\u1ecb m\u1ee5c ti\u00eau s\u1ebd t\u1ef1 \u0111\u1ed9ng b\u1ecb crash ho\u1eb7c b\u1ecb x\u00e2m nh\u1eadp t\u00f9y theo k\u1ef9 thu\u1eadt khai th\u00e1c.<\/p>\n<p>\u1ea2nh h\u01b0\u1edfng to\u00e0n c\u1ea7u: Android, macOS, TV th\u00f4ng minh, thi\u1ebft b\u1ecb ph\u00e1t tr\u1ef1c tuy\u1ebfn\u2026<\/p>\n<p>M\u1eb7c d\u00f9 m\u1ee9c \u0111\u1ed9 \u1ea3nh h\u01b0\u1edfng m\u1ea1nh nh\u1ea5t \u0111\u01b0\u1ee3c ghi nh\u1eadn tr\u00ean Android, c\u00e1c cu\u1ed9c ph\u00e2n t\u00edch m\u00e3 ngu\u1ed3n cho th\u1ea5y l\u1ed7 h\u1ed5ng c\u0169ng c\u00f3 th\u1ec3 xu\u1ea5t hi\u1ec7n tr\u00ean:<\/p>\n<ul>\n<li data-xf-list-type=\"ul\">M\u1ed9t s\u1ed1 phi\u00ean b\u1ea3n macOS h\u1ed7 tr\u1ee3 DDP (nh\u01b0ng c\u00f3 th\u1ec3 kh\u00f3 khai th\u00e1c h\u01a1n do c\u01a1 ch\u1ebf x\u1eed l\u00fd tr\u01b0\u1edbc)<\/li>\n<li data-xf-list-type=\"ul\">C\u00e1c smart TV, \u0111\u1ea7u ph\u00e1t \u0111a ph\u01b0\u01a1ng ti\u1ec7n, thi\u1ebft b\u1ecb streaming t\u00edch h\u1ee3p Dolby<\/li>\n<li data-xf-list-type=\"ul\">C\u00e1c h\u1ec7 th\u1ed1ng gi\u1ea3i tr\u00ed tr\u00ean xe h\u01a1i ho\u1eb7c thi\u1ebft b\u1ecb IoT h\u1ed7 tr\u1ee3 DDP<\/li>\n<li data-xf-list-type=\"ul\">V\u1edbi s\u1ef1 ph\u1ed5 bi\u1ebfn r\u1ed9ng r\u00e3i c\u1ee7a Dolby, ph\u1ea1m vi \u1ea3nh h\u01b0\u1edfng c\u00f3 th\u1ec3 lan sang nhi\u1ec1u n\u1ec1n t\u1ea3ng kh\u00e1c n\u1ebfu c\u00e1c nh\u00e0 s\u1ea3n xu\u1ea5t kh\u00f4ng c\u1eadp nh\u1eadt s\u1edbm.<\/li>\n<\/ul>\n<p>L\u1ed7 h\u1ed5ng n\u00e0y b\u1ecb \u0111\u00e1nh gi\u00e1 nguy hi\u1ec3m b\u1edfi:<\/p>\n<ul>\n<li data-xf-list-type=\"ul\">\u0110\u00e2y ho\u00e0n to\u00e0n l\u00e0 l\u1ed7 h\u1ed5ng \u201czero-click\u201d, ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng h\u1ec1 bi\u1ebft m\u00ecnh b\u1ecb t\u1ea5n c\u00f4ng<\/li>\n<li data-xf-list-type=\"ul\">C\u00f3 kh\u1ea3 n\u0103ng chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb t\u1eeb xa<\/li>\n<li data-xf-list-type=\"ul\">C\u00f3 th\u1ec3 b\u1ecb l\u1ee3i d\u1ee5ng \u0111\u1ec3 c\u00e0i m\u00e3 \u0111\u1ed9c, \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u, nghe l\u00e9n, \u0111i\u1ec1u khi\u1ec3n t\u1eeb xa<\/li>\n<li data-xf-list-type=\"ul\">R\u1ea5t d\u1ec5 t\u00e1i hi\u1ec7n v\u00e0 khai th\u00e1c trong m\u00f4i tr\u01b0\u1eddng ki\u1ec3m th\u1eed<\/li>\n<li data-xf-list-type=\"ul\">Tin nh\u1eafn \u00e2m thanh gi\u1ea3 m\u1ea1o c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c d\u00f9ng trong c\u00e1c chi\u1ebfn d\u1ecbch phishing tinh vi<\/li>\n<\/ul>\n<p>\u0110\u1ec3 gi\u1ea3m thi\u1ec3u r\u1ee7i ro b\u1ecb khai th\u00e1c, ng\u01b0\u1eddi d\u00f9ng v\u00e0 qu\u1ea3n tr\u1ecb vi\u00ean h\u1ec7 th\u1ed1ng n\u00ean th\u1ef1c hi\u1ec7n c\u00e1c bi\u1ec7n ph\u00e1p sau:<\/p>\n<ul>\n<li data-xf-list-type=\"ul\">Nhanh ch\u00f3ng c\u1eadp nh\u1eadt h\u1ec7 \u0111i\u1ec1u h\u00e0nh Android v\u00e0 \u1ee9ng d\u1ee5ng Google Messages (Google d\u1ef1 ki\u1ebfn ph\u00e1t h\u00e0nh b\u1ea3n v\u00e1 s\u1edbm).<\/li>\n<li data-xf-list-type=\"ul\">H\u1ea1n ch\u1ebf d\u00f9ng RCS tr\u00ean c\u00e1c thi\u1ebft b\u1ecb ch\u01b0a v\u00e1 l\u1ed7i, t\u1ea1m th\u1eddi chuy\u1ec3n sang SMS\/MMS truy\u1ec1n th\u1ed1ng n\u1ebfu c\u1ea7n.<\/li>\n<li data-xf-list-type=\"ul\">Th\u1eadn tr\u1ecdng khi nh\u1eadn c\u00e1c file \u00e2m thanh l\u1ea1 t\u1eeb ng\u01b0\u1eddi kh\u00f4ng r\u00f5 danh t\u00ednh.<\/li>\n<li data-xf-list-type=\"ul\">C\u00e1c nh\u00e0 s\u1ea3n xu\u1ea5t thi\u1ebft b\u1ecb c\u1ea7n x\u00e1c minh v\u00e0 \u0111\u1ea9y b\u1ea3n c\u1eadp nh\u1eadt firmware t\u00edch h\u1ee3p b\u1ea3n v\u00e1.<\/li>\n<li data-xf-list-type=\"ul\">Qu\u1ea3n tr\u1ecb vi\u00ean doanh nghi\u1ec7p n\u00ean t\u0103ng c\u01b0\u1eddng gi\u00e1m s\u00e1t \u1ee9ng d\u1ee5ng x\u1eed l\u00fd \u00e2m thanh n\u1ed9i b\u1ed9.<\/li>\n<\/ul>\n<p>L\u1ed7 h\u1ed5ng trong Dolby Digital Plus kh\u00f4ng ch\u1ec9 l\u00e0 m\u1ed9t s\u1ef1 c\u1ed1 k\u1ef9 thu\u1eadt \u0111\u01a1n l\u1ebb, m\u00e0 l\u00e0 h\u1ed3i chu\u00f4ng c\u1ea3nh b\u00e1o v\u1ec1 m\u1ee9c \u0111\u1ed9 nguy hi\u1ec3m c\u1ee7a c\u00e1c h\u1ec7 th\u1ed1ng x\u1eed l\u00fd \u0111a ph\u01b0\u01a1ng ti\u1ec7n t\u1ef1 \u0111\u1ed9ng. Vi\u1ec7c ch\u1ec9 nh\u1eadn m\u1ed9t \u0111o\u1ea1n \u00e2m thanh c\u0169ng c\u00f3 th\u1ec3 b\u1ecb t\u1ea5n c\u00f4ng cho th\u1ea5y tin nh\u1eafn tho\u1ea1i \u0111\u00e3 tr\u1edf th\u00e0nh \u201cc\u1eeda ng\u00f5\u201d m\u1edbi c\u1ee7a t\u1ed9i ph\u1ea1m m\u1ea1ng.<\/p>\n<p>Trong th\u1eddi gian ch\u1edd b\u1ea3n v\u00e1 ch\u00ednh th\u1ee9c, ng\u01b0\u1eddi d\u00f9ng c\u1ea7n n\u00e2ng cao c\u1ea3nh gi\u00e1c v\u00e0 ch\u1ee7 \u0111\u1ed9ng c\u1eadp nh\u1eadt thi\u1ebft b\u1ecb. V\u1edbi s\u1ef1 ph\u00e1t tri\u1ec3n m\u1ea1nh c\u1ee7a c\u00e1c d\u1ecbch v\u1ee5 nh\u1eafn tin \u0111a ph\u01b0\u01a1ng ti\u1ec7n, m\u1ed7i cu\u1ed9c \u201ctrao \u0111\u1ed5i \u00e2m thanh\u201d c\u1ea7n \u0111\u01b0\u1ee3c xem x\u00e9t v\u1edbi m\u1ee9c \u0111\u1ed9 c\u1ea9n tr\u1ecdng nh\u01b0 m\u1ed9t file th\u1ef1c thi c\u00f3 th\u1ec3 ch\u1ee9a m\u00e3 \u0111\u1ed9c.<\/p>\n<div style=\"text-align: right\"><b><i>WhiteHat<\/i><\/b>\u200b<\/div>\n<div style=\"text-align: right;margin-top: 16px\"><i>Theo: <a href=\"https:\/\/whitehat.vn\/threads\/lo-hong-zero-click-trong-dolby-ddp-co-the-dan-den-tan-cong-tu-xa-tren-android.18851\/\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/whitehat.vn\/threads\/lo-hong-zero-click-trong-dolby-ddp-co-the-dan-den-tan-cong-tu-xa-tren-android.18851\/<\/a><\/i><\/div>\n","protected":false},"excerpt":{"rendered":"<p>M\u1ed9t l\u1ed7 h\u1ed5ng v\u1eeba \u0111\u01b0\u1ee3c c\u00e1c chuy\u00ean gia c\u1ee7a Google Project Zero c\u00f4ng b\u1ed1, li\u00ean quan \u0111\u1ebfn c\u00f4ng ngh\u1ec7 \u00e2m thanh Dolby Digital Plus \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng r\u1ed9ng r\u00e3i trong h\u1ec7 sinh th\u00e1i thi\u1ebft b\u1ecb di \u0111\u1ed9ng, \u0111\u1eb7c bi\u1ec7t l\u00e0 Android. \u0110i\u1ec1u \u0111\u00e1ng s\u1ee3 l\u00e0 k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 g\u1eedi m\u1ed9t \u0111o\u1ea1n \u00e2m thanh [&hellip;]<\/p>\n","protected":false},"author":46,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33],"tags":[],"class_list":["post-10511","post","type-post","status-publish","format-standard","hentry","category-tin-tuc-cua-vien"],"_links":{"self":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/10511","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/users\/46"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/comments?post=10511"}],"version-history":[{"count":0,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/10511\/revisions"}],"wp:attachment":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/media?parent=10511"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/categories?post=10511"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/tags?post=10511"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}