This answer (to what can you do about Stagefright) says "use Firefox". Why is FF not vulnerable and Chrome is?
Firefox have used Android's StageFright Media Library which is disabled by default in Firefox for Android after the stage fright issue is found in Android devices. So the Firefox browser tries to use the Hardware decoder first and then the software decoder as a fallback. You can see the
about:config page and search for
stagefright keyword. Based on this article,
If Firefox does not recognize your hardware decoder, it will use a safer (but slower) software decoder. Daring users can manually enable hardware decoding. Enter about:config as described above and search for “stagefright”. To force hardware video decoding, change the “media.stagefright.omxcodec.flags” preference to 16. The default value is 0, which will try the hardware decoder and fall back to the software decoder if there are problems (Bug 797225). The most likely problems you will encounter are videos with green lines or crashes.
So if you are using Firefox make sure that the
about:config values for the flags
stagefright.force-enabled stays default (i.e. 0, false, false).
Screenshot (click to enlarge)
While Zimperium zLabs' VP of Platform Research and Exploitation, Joshua J. Drake hasn't said not to use Chrome. But he has suggested that Firefox is your best bet to avoid hacking by browser in his tweet.