'Quadrooter' Bug Puts Android Devices At Risk

...

Android owners, beware: Security flaws found in Qualcomm processors serving Google's mobile operating system could put your devices at risk.

Researchers at security firm Check Point researchers recently discovered the vulnerabilities, which may affect as many as 900 million devices.

During last week's Def Con security conference in Las Vegas, Check Point's Adam Donenfeld revealed four new privilege escalation exploits—together dubbed "Quadrooter"—which can be used to remotely gain root access to Android handsets. An attacker simply needs to trick a user into installing a malicious app, and the cyberthief gains unfettered access to saved data. The attacker can also change or remove system-level files; delete or add apps; and access the device's screen, camera, or microphone, the security firm said.

Since the vulnerable drivers are pre-installed, they can only be fixed via a patch from distributors or carriers. Those companies, meanwhile, can only push the repair after receiving new driver packs from Qualcomm.

Qualcomm claims to have already fixed all four flaws, and Google said it patched three in an August update; the final debugging will come with the company's next security update, Android Headlines said.

Neither Qualcomm nor Google immediately responded to PCMag's request for comment.

Concerned Android owners can download Check Point's free QuadRooter Scanner app, which, as its name suggests, scans your phone to see if the necessary patches have been downloaded and installed.

Even the most secure devices are at risk, according to Check Point, which provided the following list of affected smartphones:

Qualcomm just last month unveiled its latest mobile processor, the Snapdragon 821, boasting 10 percent better performance than the 820; the latter just recently began showing up in gadgets like the Galaxy S7 and HTC 10.

Categories
APPLICATIONS
0 Comment

Leave a Reply

Captcha image


RELATED BY

  • 5300c769af79e

    T-Mobile, Sprint Reveal Dueling Unlimited Plans

    It's a battle over unlimited data for Sprint and T-Mobile.The new plans are "100 percent unlimited" for smartphones and tablets, offering all-you-can-eat talk, text, and 4G LTE smartphone data, T-Mobile said.
  • 5300c769af79e

    The Show: Episode 118 - So Much Note 7

    On this episode of the Droid Life Show, we’re talking more Galaxy Note 7!We’ll also talk Google Duo, Android Nougat release date, and laugh at T-Mobile and Sprint’s laughably bad new unlimited plans.
  • 5300c769af79e

    Wednesday Poll: Do You Care About Monthly Security Updates?

    With Google’s launch of monthly security updates last year, many device owners are beginning to take notice at how well, or how bad, their particular OEM and carrier are at delivering these updates.With that being said, there are those who care very much about security updates.
  • 5300c769af79e

    Tech Titans Slam Encryption Bill as 'Unworkable'

    Some of the biggest names in tech are fighting a draft bill that would make it possible for US courts to demand help bypassing encryption.The groups represent companies like Apple, Facebook, Google, Microsoft, Twitter, Amazon, eBay, Netflix, Samsung, Nintendo, and more.