New security vulnerability puts 900 million Android devices at risk, researchers warn

Android devices containing the actual vulnerable chipset technologies are the BlackBerry Priv, Google's Nexus 5X, Nexus six and Nexus 6P and also Samsung's Galaxy S7 and also S7 Edge, according to CheckPoint.

Security firm Examine Point provides identified vulnerabilities affecting 900 million smartphones and also tablets designed in order to use chipsets coming from summoners war hack download element maker Qualcomm.

Samsung provides certainly not but responded into a request for remark on this story coming from

Check Point disclosed the actual vulnerabilities Sunday in the DEF CON 24 hacking conference within Las Vegas. The Particular four vulnerabilities, dubbed "QuadRooter" through check Point, affect Android devices making use of chipsets via element maker Qualcomm. Chipsets are generally collections of components or even circuits in which handle data flow within the device.

Manufacturers are usually ramping up their efforts about mobile device security. last week, regarding example, Samsung unveiled its Galaxy Note7 phone, that provides iris-scanning technology in order to unlock the actual Android device.

This just isn't the very first period in which Android has been thrust in to the safety spotlight. Final year your Stagefright flaw throughout Android's multimedia processing sparked concern and also prompted fixes through Google, carriers and smartphone makers.

"We appreciate Examine Point's study since it assists enhance the safety in the broader mobile ecosystem," a new Google spokesman told, through email. "Android devices using our most current security patch level are previously protected against three of those 4 vulnerabilities."

Follow James Rogers on Twitter @jamesjrogers

A spokesman pertaining to Examine Point told there's no evidence in which QuadRooter continues in order to be employed in a cyberattack. However, only three in the 4 'critical' QuadRooter patches have been fixed, he added.

Qualcomm informed which it was notified concerning the vulnerabilities in between February and also April  2016, generating patches pertaining to just about all 4 vulnerabilities obtainable between April and July.

If virtually any one of the actual vulnerabilities will be exploited, an attacker could gain access for the device, explained Verify Point, inside a weblog post. "Any Android device utilizing these chipsets are at risk," it added.

Check Point offers a free regarding charge regarding charge QuadRooter scanner app on Google Play that will test devices for your vulnerability.

"BlackBerry will be aware of the actual Quadrooter flaws and the vulnerabilities that will affects many Android devices," mentioned BlackBerry, in a statement emailed to become able to "A fix with regard to BlackBerry's Android devices ended up being integrated and tested inside our labs instantly following the record had been received and which we will expedite it to customers as soon as possible."

An attack could exploit your vulnerabilities in the chipsets' software drivers utilizing a malicious app. "Since your vulnerable drivers are generally pre-installed about devices at the purpose of manufacture, they will are only able to end up being fixed by simply installing a new patch from the distributor or even carrier," Verify Point said.

The telephone maker declared it just isn't conscious of any exploits for your vulnerability "in the particular wild" as well as will not think in which any kind of clients are in risk.

Check Point says the particular circumstance highlights the particular inherent safety risks inside Google's Android operating system. "Critical security updates must pass by means of the whole supply chain prior to that they can be made available to end users," it said. "Once available, the finish users must then make sure to install these summoners war cheat updates to end up being able to protect their own devices as well as data."

The fourth vulnerability, CVE-2016-5340, will possibly be addressed in an upcoming Android safety bulletin, Google added, noting that the company's Android partners may take action sooner by simply referencing the "public patch" given by Qualcomm.

Write a comment

Comments: 0