Posted 9/13/2023, 2:15:00 PM

Android Loophole Exposes Credit Card Details Until September Patch

Android loophole allows accessing full credit card details via NFC on devices running Android 5.0+
Issue exploits Screen Pinning and NFC settings when Google Wallet has a card set up for payments
Affects devices not receiving latest security patches or stuck on older Android versions
Google aware of problem, fix coming in September 2023 security patch
Turn off Screen Pinning to prevent until patch is installed; not enabled by default

9to5google.com

Relevant topic timeline:

9/7/2023

September Google System Updates: FIDO2 PIN support, more

Android's September 2023 system updates will include better support for using a PIN with the FIDO2 security standard, along with improvements to Google Wallet and the introduction of a new settings page on the Play Store.

9/21/2023

Android 14 Beta Breaks Google Wallet for Some Users

Google released the first beta of Android 14 QPR1 for Pixel phones, but users should be aware that Google Wallet is currently non-functional and unable to support NFC payments.

10/3/2023

Google Releases October Android Update Fixing 54 Flaws Including 2 Actively Exploited Bugs

Google has released the October 2023 security updates for Android, addressing 54 vulnerabilities, including two actively exploited flaws, with one impacting various software products and the other affecting multiple versions of Arm Mali GPU drivers on Android devices.