⬇ Download holy card: ·
Saint Stagefright 2.0, Who Sings Again From MP3s
Patron of innocent-looking MP3 and MP4 files, previews that load by themselves, and phones that haven't seen an update in years.
Life
On 1 October 2015, barely two months after the first Stagefright, Joshua Drake of Zimperium announced the sequel: the metadata of a crafted MP3 or MP4 file was enough to run code on an Android phone. The flaw lived in libutils, present since Android 1.0, and was reached through libstagefright: to hit a victim it was enough to make them open a web page playing the wrong song.
Prayer
O Saint Stagefright 2.0, who returns like every sequel nobody asked for, let our phones receive at least one update. Amen.
How to celebrate
Celebrated by installing the October 2015 Android security bulletin and listening to music only on an updated phone.
A bug that pays always gets a sequel.