Security researchers have disclosed an unpatched Android flaw that can leave a phone stuck in an endless crash loop after a user simply installs a malicious app, with a data-erasing factory reset often the only fix.

The exploit, dubbed GhostMap, can cause persistent denial of service across all Android releases since Android 10.

Researchers at Bitdefender Labs said a crafted app "can leave an Android phone stuck in a crash loop," even if users never open it or grant it permissions.

GhostMap stems from inconsistent handling of ZIP entries by two Android libraries, libziparchive and libandroidfw. By creating a........

© International Business Times