The flaw, CVE-2023-40088, can help a hacker run rogue computer code on an Android phone; no user interaction required. But it may take awhile for Android vendors to ship out the fix.

Answer: It is an urban myth. The FAA denounced the claim as untrue; it is not possible for an Android phone to hack into a Flight Management Computer and certainly not into a Flight Control Computer.

A phone that tells two stories complicates things. Mikko Hypponen, a prominent computer-security expert, says Karlsson's modification is another stage in the arms race among spies, law enforcement ...