Qualcomm confirms security vulnerability on Android devices | Infinium-tech

Qualcomm confirmed this week that hackers took advantage of a zero-day bug – a vulnerability that the manufacturer was not aware of when it was abused. The breach was found in dozens of chipsets used in millions of Android smartphones around the world.

The San Diego company also revealed that a patch was sent to OEMs last month and called the attack a “limited, targeted exploit.”

This vulnerability affected 64 chips made by Qualcomm. These include the Snapdragon 8 Gen 1 SoC, which is used in flagship devices like Samsung Galaxy S22 Ultra, OnePlus 10 Pro, Sony Xperia 1 IV, Oppo Find X5 Pro, Honor Magic4 Pro, Xiaomi 12, and others. The list also includes the Snapdragon modem and FastConnect module used for Bluetooth and Wi-Fi connectivity.

A company spokesperson said Qualcomm has already shipped a patch but it is up to smartphone makers to release it to their customers. Amnesty International’s Security Lab confirmed the Google Threat Analysis Group’s assessment that the issue is serious.

An Amnesty spokesperson said comprehensive research into who was at fault and who might have exploited the vulnerability “will be revealed soon”. Investigations by organizations such as Google and Amnesty suggest that the hacking campaign may have targeted specific individuals rather than a large group of users.

through