Qualcomm Firmware Vulnerabilities Expose 900 Million Devices, Including Security-Focused Smartphones

[Lucian Armasu]

Check Point Software Technologies uncoverd some Qualcomm firmware vulnerabilities that affect up to 900 million Android users.

Qualcomm Firmware Vulnerabilities Expose 900 Million Devices, Including Security-Focused Smartphones : Read more

 

[targetdrone]

If the S7 is affected so too is the $850+ Note 7.

 

[elho_cid]

Windows 10 Mobile and chill

 

[turkey3_scratch]

This is why I don't do anything important on my phone anyway. They can see my Pokemon Going all they want for all I care :lol:

 

[Guest]

We keep hearing about these "massive vulnerabilities", but I've yet to see any actual real case exploit. Same thing with stagefright, and all those other "theoretical" problems.

 

[kenjitamura]

We keep hearing about these "massive vulnerabilities", but I've yet to see any actual real case exploit. Same thing with stagefright, and all those other "theoretical" problems.

Google was probably also informed of the exploit at the same time as Qualcomm and started screening for applications that exploit the bugs before allowing them on the play store. So as long as people only get their apps from the play store they'd never be exposed to this problem. The only people that could have been affected by this are the ones that manually download apps off the internet and select "allow installation of unofficial apps" in the security settings of their Android phone.

 

[Hydrotricithline]

Is there anyway an end user and patch their phone, being a coding idiot myself. I own a oneplus two .. with 4 vulnerabilities including these ones.. or do we just sit and hope the carriers eventually pass us the patch?

 

[scook9]

We keep hearing about these "massive vulnerabilities", but I've yet to see any actual real case exploit. Same thing with stagefright, and all those other "theoretical" problems.

In the article they mentioned that Qualcomm (and likely Google) were notified this spring, about 4-5 months ago. It is a safe bet that the monthly security update from google immediately following the notification included patches to fix the problem as well as updates to the AOSP base as well reflecting the patches. What the other manufacturers do from there though is not up to Google. Personally, this is one of the reasons I only plan on owning Nexus phones that get a monthly update from now on (that and I hate the OEM skins polluting the interface)

 

[andy_newton]

@elho_cid Only if your device has a non-qualcomm chipset

 

[andy_newton]

With so many logical fallacies, this author will not make it past English 101 if he takes the class in City College of San Francisco. So don't worry about a single word he writes.