Qualcomm has mentioned that hackers have exploited a zero-day safety flaw in dozens of its chipsets present in well-liked Android units, nonetheless, the influence could also be restricted. Google’s Menace Evaluation Group indicated this vulnerability, and Amnesty Worldwide’s Safety Lab confirmed it, as per a report.
The zero-day – a kind of vulnerability that’s unknown to the {hardware} maker when it was abused – “could also be beneath restricted, focused exploitation,” Qualcomm mentioned, citing unspecified “indications” from Google’s Menace Evaluation Group.The failings have been mounted.
In keeping with a report by TechCrunch, US cybersecurity company CISA included the Qualcomm flaw in its record of vulnerabilities which might be identified to be, or have been, exploited. It added that the main points are scarce, however it’s confirmed that this vulnerability was utilized in real-world assaults, although the precise targets and motives stay unknown.
What Qualcomm has to say
Qualcomm’s spokesperson Catherine Baker informed the publication that the corporate commends “the researchers from Google Undertaking Zero and Amnesty Worldwide Safety Lab for utilizing coordinated disclosure practices,” permitting the corporate to roll out fixes for the vulnerability.
Qualcomm has listed 64 completely different chipsets affected by this vulnerability, together with the corporate’s flagship Snapdragon 8 Gen 1 chipset, which is utilized in dozens of Android telephones, together with some made by Motorola, OnePlus, Oppo and Xiaomi, amongst others — which signifies that hundreds of thousands of customers all over the world are doubtlessly weak.
Qualcomm’s spokesperson mentioned that “fixes have been made accessible to our clients as of September 2024,” and that it’s now as much as Android smartphone makers to launch the patch to their clients’ units.
