'Quadrooter' Bug Puts Android Devices At Risk

...

Android owners, beware: Security flaws found in Qualcomm processors serving Google's mobile operating system could put your devices at risk.

Researchers at security firm Check Point researchers recently discovered the vulnerabilities, which may affect as many as 900 million devices.

During last week's Def Con security conference in Las Vegas, Check Point's Adam Donenfeld revealed four new privilege escalation exploits—together dubbed "Quadrooter"—which can be used to remotely gain root access to Android handsets. An attacker simply needs to trick a user into installing a malicious app, and the cyberthief gains unfettered access to saved data. The attacker can also change or remove system-level files; delete or add apps; and access the device's screen, camera, or microphone, the security firm said.

Since the vulnerable drivers are pre-installed, they can only be fixed via a patch from distributors or carriers. Those companies, meanwhile, can only push the repair after receiving new driver packs from Qualcomm.

Qualcomm claims to have already fixed all four flaws, and Google said it patched three in an August update; the final debugging will come with the company's next security update, Android Headlines said.

Neither Qualcomm nor Google immediately responded to PCMag's request for comment.

Concerned Android owners can download Check Point's free QuadRooter Scanner app, which, as its name suggests, scans your phone to see if the necessary patches have been downloaded and installed.

Even the most secure devices are at risk, according to Check Point, which provided the following list of affected smartphones:

Qualcomm just last month unveiled its latest mobile processor, the Snapdragon 821, boasting 10 percent better performance than the 820; the latter just recently began showing up in gadgets like the Galaxy S7 and HTC 10.

Categories
APPLICATIONS
0 Comment

Leave a Reply

Captcha image


RELATED BY

  • 5300c769af79e

    Connect 50+ UE Speakers With 'PartyUp'

    The summer halcyon days are over, but the party doesn't have to end.Ultimate Ears also updated its mobile apps to make the pairing process faster and more convenient.
  • 5300c769af79e

    How to Clean Crapware From a New PC

    With many of the uninstall routines, the dialog boxes had giant buttons that would say "Uninstall and Get PC XXXXXX" or something similar.It keeps a database of crapware, and helps you identify it on a new Windows PC.
  • 5300c769af79e

    Apple HomePod vs. Amazon Echo vs. Google Home: Smart Speaker Showdown

    As an Apple speaker with Siri, the HomePod offers full voice control of any smart home device compatible with Apple's HomeKit ecosystem.Besides voice-controlled home assistants, the Apple HomePod, Amazon Echo, and Google Home are all speakers designed to let you listen to music.
  • 5300c769af79e

    FCC Wins Huge Net Neutrality Victory Over Big Telecom

    An appellate court on Tuesday handed a major victory to the Federal Communications Commission by upholding the agency's watershed Open Internet Order, which ensures equal access to the Internet.Supreme Court, according to FCC Commissioner Mike O'Rielly, who criticized the ruling.