Rakuten Mobile smartphones face Android Verified Boot vulnerability

A security vulnerability has been identified in four Rakuten Mobile smartphone models involving the Android Verified Boot (AVB) mechanism. According to reports from JVN, the devices used known AOSP test keys instead of the standard manufacturer-managed keys to verify the OS during startup.

The affected models include the Rakuten Mini, Rakuten Hand, Rakuten Hand 5G, and Rakuten BIG s. This flaw could allow an attacker with physical access to the device to install a tampered system image.

Because the identified models have already reached their end-of-support lifecycle, users are being advised to stop using these devices and switch to newer products to ensure security.