Lately, poking through my SPAM folder I have found a typical sextortion scam letter. It has a PNG file with letter text attached.
What's interesting it's asking to interact with the image and "copy-paste" wallet id because it's "cAsE sensitive" which is obviously not possible for a PNG image with text.
This may look like some blooper, however I've heard that there are recent Android PNG vulnerabilities CVE-2019-1986, CVE-2019-1987, CVE-2019-1988 which seem to allow the perpetrator to execute remote code.
Am I overthinking the case? Is this attack possible at this moment and how do I protect from it?
P.S. my phone manufacturer does not seem to update Android security version very often (obviously I don't want to publish what my current security update version currently is).