HTC certainly didn’t sit on this one for long, which is reassuring if you’re using a HTC handset. Following the news that a number of the company’s devices are at risk from a major security vulnerability, HTC has now confirmed the issue and vowed to release a fix very soon.
The issue was first discovered by three researchers, who found that any internet-connected application can run a simple request and obtain all kinds of personal data from your Android-powered device, such as text messages, location data, system logs, and address book details.
In a public statement, HTC has assured users that they are not at risk from the company’s official software, but that there is potential for third-party malware applications to exploit the flaw and help themselves to your data. The company advises that, until the over-the-air software update goes live, you only use applications from publishers you trust.
The company’s statement reads:
HTC takes claims related to the security of our products very seriously. In our ongoing investigation into this recent claim, we have concluded that while this HTC software itself does no harm to customers’ data, there is a vulnerability that could potentially be exploited by a malicious third-party application. A third party malware app exploiting this or any other vulnerability would potentially be acting in violation of civil and criminal laws. So far, we have not learned of any customers being affected in this way and would like to prevent it by making sure all customers are aware of this potential vulnerability.
HTC is working very diligently to quickly release a security update that will resolve the issue on affected devices. Following a short testing period by our carrier partners, the patch will be sent over-the-air to customers, who will be notified to download and install it. We urge all users to install the update promptly. During this time, as always, we strongly urge customers to use caution when downloading, using, installing and updating applications from untrusted sources.
Although HTC has not provided a specific date for the update, the popular smartphone vendor has been quick to identify the issue and get to work on a fix, so you can be sure that it will drop shortly.
Will HTC’s quick fix completely resolve this situation for you, or will you be wary of HTC handsets in the future?