"Brand New Android Smartphones Shipped With 146 Security Flaws"

In a new analysis, it was uncovered that brand new android phones come with 146 CVE-level flaws in devices from 29 smartphone makers. The defects found could perhaps allow the modification of system properties (28.1%), app installation (23.3%), command execution (20.5%), and wireless settings (17.8%). These Android smartphones made by Samsung, Xiaomi, and other manufacturers, have never been turned on, or have had a malicious app downloaded onto them. These phones are shipped with these flaws. The culprit of these flaws is a range of software specific to each manufacturer, installed in addition to Android itself or its Google applications.  The only way to fix the flaws is for the smartphone maker to issue a fix.

Naked Security reports: "Brand New Android Smartphones Shipped With 146 Security Flaws"