Google has paid $112,500 as bounty for an Android exploit chain
A Chinese security researcher submitted two bugs to Google back in August 2017 that, combined, could allow the remote injection of arbitrary code into Android devices. Both bugs are already patched. Read more...
