Security flaw in some HTC Android phones might expose WiFi password

It has been reported that a security flaw in some HTC Android phones might expose WiFi password stored in the phone to hackers.

This security bug was found by Chris Hessing and Bret Jordan back in September 2011, and they have posted the detail of the exploit in their blog recently.

Affected HTC Android smartphones include but not limited to: Glacier, Desire HD, Desire S, Droid Incredible, Thunderbolt 4G, Sensation, Sensation 4G, EVO 3D, EVO 4G, ...

HTC had been informed about this bug before it was published, and they have just announced that the fix has already been developed.

"Most phones have received this fix already through regular updates and upgrades.However, some phones will need to have the fix manually loaded. Please check back next week for more information about this fix and a manual download if you need to update your phone."