GhostMap Android flaw lets malicious app trigger persistent boot loop
An app that needs no permissions and just has to be installed can send your phone into an endless reboot cycle. That's a nasty piece of work, and it's the kind of flaw that makes you reconsider how much trust we place in the "no permissions" label. If an app can do this without asking for anything, then the permission model isn't really protecting you from the worst outcomes.
What worries me is that this likely isn't a one-off bug. It points to a deeper issue in how Android handles certain system calls or resource exhaustion scenarios. The fact that it's a boot loop means the device becomes a brick until the user does a factory reset or finds a way to break the cycle, which could mean losing data. That's a serious denial-of-service vector, and it's one that doesn't require social engineering or phishing, just a moment of carelessness.
I'd want to know which Android versions are affected and whether Google's patches have addressed it. The story doesn't say, and that's the kind of detail that determines how urgent this really is. Until then, the practical advice is boring but effective: stick to official app stores and be suspicious of any APK you're asked to install.