Posted by Marc Schoenefeld on Mar 28
Hi,
the dexdump tool, bundled with Android SDK was identified to
perform suspicious write accesses in the dexDecodeDebugInfo function,
as defined in dalvik/libdex/DexFile.c.
The structural parser in dexdump failed to properly parse debug info
such as code position info, with indications of code execution. This
could potentially be misused by remote attackers, tricking users into
opening apk/dex-files from untrusted sources (such as for…
Source: Android SDK: Segmentation fault with dexdump / dexDecodeDebugInfo
