Millions of Android Smartphones vulnerable to 400 Qualcomm Snapdragon SoC security vulnerabilities

If you use one Android smartphone who is equipped with someone Snapdragon Soc, there is a high probability of being susceptible to a number of potentially serious security vulnerabilities.

Οits security researchers Check Point report that they have discover more than 400 code vulnerabilities codenamed “Achilles", Aimed at digital signal processors (DSP) of Qualcomm SoC.

Her researchers Check Point keep this information confidential, in order to prevent the malicious use of these vulnerabilities, until there is some correction by the Qualcomm. However, the consequences can be serious.

The Check Point points out that intruders can silently record your calls, steal your data, and even make your devices useless by installing malware that cannot be removed from them.

It is not clear how easy it is for a Hacker to exploit these vulnerabilities. However, the researchers used the technique "fuzz testing technologies”And other methods for detecting defects in DSP, which tend to be black boxes of devices and which are more difficult to study.

Fortunately, the solutions to the above problems are on the way, as the Qualcomm recognized these vulnerabilities, and in collaboration with Smartphone makers and Google, which is responsible for the development and distribution of Android, will soon proceed with a new security patch that will mitigate the risk. 

Users can minimize the risk by getting new Google security patches when available, as well as downloading apps from trusted stores like Google Play Store.

Although the threat is relatively low, there is always an important reason to worry. With the Snapdragon SoC Approximately 40% of the Smartphones sold in 2019 are equipped and there is a plethora of flagships released by Samsung, LG and Xiaomi. This potentially leaves "hundreds of millions»Devices exposed to vulnerabilities, and according to its head Check Point, Yaniv Balmas, repairing these vulnerabilities could be a difficult or completely impossible process.

Although Qualcomm itself provides extensive support for Android devices, not the same as the manufacturers of Smartphones. As it has become very clear, the various manufacturers of Android Smartphones are usually too many slow in delivering updates of Android, and may discontinue support much earlier than Qualcomm. 

Although updates to Google Security Code are sometimes delivered earlier than usual ROM distributions by Smartphone makers themselves, there may be millions of devices that have stopped receiving updates due to their age or independent update policies. followed by the manufacturers themselves.

Source