Andrew Huang and Sean Cross said in his blog that someone could run malicious software (malicious ) in memory by itself .
This could occur because the memory card has a small computer called a microcontroller which is used to view the details of the data stored .
By exploiting these loopholes , someone could intercept the data that is being transferred from one storage to another storage . They are then able to examine and modify the data.
Huang and Cross said that the attack could also be used to copy data clandestinely , modify sensitive data such as passwords , or perform any undue execution file .
