Saturday, Sep 23, 2023
English News
  • Hyderabad
  • Telangana
  • AP News
  • India
  • World
  • Entertainment
  • Science and Tech
  • Sport
  • Business
  • Rewind
  • ...
    • NRI
    • View Point
    • cartoon
    • Columns
    • Education Today
    • Reviews
    • Property
    • Videos
    • Lifestyle
E-Paper
  • NRI
  • View Point
  • cartoon
  • Columns
  • Reviews
  • Education Today
  • Property
  • Videos
  • Lifestyle
Home | Tech | Bug In Qualcomm Mobile Chip Puts Android Users Privacy At Risk

Bug in Qualcomm mobile chip puts Android users’ privacy at risk

If exploited, the vulnerability in Qualcomm mobile station modem (MSM) would have allowed an attacker to use Android OS itself as an entry point to inject malicious and invisible code into phones

By IANS
Updated On - 04:13 PM, Sat - 8 May 21
Bug in Qualcomm mobile chip puts Android users’ privacy at risk
whatsapp facebook twitter telegram

New Delhi: Cyber security researchers have discovered a high-risk security vulnerability in Qualcomm mobile chip responsible for cellular communication in nearly 40 per cent of the high-end phones offered by Google, Samsung, LG, Xiaomi and OnePlus.

If exploited, the vulnerability in Qualcomm mobile station modem (MSM) would have allowed an attacker to use Android OS itself as an entry point to inject malicious and invisible code into phones, granting them access to SMS messages and audio of phone conversations, according to Check Point Research.

Vulnerability also could have potentially allowed an attacker to unlock a mobile device’s SIM, according to the cyber security company.

Qualcomm has confirmed the bug and fixed the issue and mobile players are notified, according to the researchers.

The chip-maker classified the high-rated vulnerability as CVE-2020-11292, notifying the relevant device vendors.

Qualcomm provides a wide variety of chips that are embedded into devices that make up over 40 per cent of the mobile phone market.

According to Counterpoint Research, Qualcomm’s Mobile Station Modem is a system of chips that provides capabilities for things like voice, SMS, and high-definition recording, mostly on higher-end devices.

“Phone-makers can customise the chips so they do additional things like handle SIM unlock requests. The chips run in 31 per cent of the world’s smartphones”, according to figures from Counterpoint Research.

The Check Point team found that if a security researcher want to implement a modem debugger to explore the latest 5G code, the easiest way to do that is to exploit MSM data services through QMI so could a cybercriminal, of course.

“During our investigation, we discovered a vulnerability in a modem data service that can be used to control the modem and dynamically patch it from the application processor,” they said in a blog post on Thursday.

“This means an attacker could have used this vulnerability to inject malicious code into the modem from Android, giving them access to the device user’s call history and SMS, as well as the ability to listen to the device user’s conversations,” they added.

A hacker can also exploit the vulnerability to unlock the device’s SIM, thereby overcoming the limitations imposed by service providers on it.

“Mobile devices should always be updated to the latest version of the OS to protect against the exploitation of vulnerabilities. Only installing apps downloaded from official app stores reduces the probability of downloading and installing a mobile malware,” the researchers advised.

In August 2020, Check Point Research found over 400 vulnerabilities on Qualcomm’s Snapdragon DSP (Digital Signal Processor) chip that threatened the usability of mobile phones.

Telangana Today Whatsapp
  • Follow Us :
  • Tags
  • Android
  • Cyber Security
  • Google
  • LG

Related News

  • Tendulkar, Shastri, Gavaskar head to Varanasi for stadium foundation ceremony

    Tendulkar, Shastri, Gavaskar head to Varanasi for stadium foundation ceremony

  • DUSU polls saw 42% turnout, with results set to be announced this Saturday

    DUSU polls saw 42% turnout, with results set to be announced this Saturday

  • Google CEO mourns loss of modern data centre pioneer Luiz Andre Barroso

    Google CEO mourns loss of modern data centre pioneer Luiz Andre Barroso

  • Samsung, Huawei to drive mass adoption of foldable smartphones next year

    Samsung, Huawei to drive mass adoption of foldable smartphones next year

  • SC rejects pleas seeking permission to allow manufacture of firecrackers containing barium, joint crackers

    SC rejects pleas seeking permission to allow manufacture of firecrackers containing barium, joint crackers

  • Sebi levies Rs 55 lakh fine on 11 entities for non-genuine trades

    Sebi levies Rs 55 lakh fine on 11 entities for non-genuine trades

Latest News

  • Indian Army unit leaves for Russia to take part in military drill

    7 mins ago
  • Keeping away from sweets: Hrithik Roshan shares glimpse of Ganesh Visarjan at home

    9 mins ago
  • UP: Sanjay Gandhi Hospital decides to move court against suspension of licence

    14 mins ago
  • Woman killed, two others injured in bike-bus collision in Warangal

    16 mins ago
  • Hyderabad listed among top 50 most surveilled cities in the world

    23 mins ago
  • ‘India most expensive stock market in the world’

    25 mins ago
  • Kerala CPI to request Rahul Gandhi not to contest from Wayanad

    33 mins ago
  • Qatar Airways flight diverts to Hyderabad due to bad weather conditions

    36 mins ago

company

  • Home
  • About Us
  • Contact Us

business

  • Subscribe

telangana today

  • Telangana
  • Hyderabad
  • Latest News
  • Entertainment
  • World
  • Andhra Pradesh
  • Science & Tech
  • Sport

follow us

© Copyrights 2022 TELANGANA PUBLICATIONS PVT. LTD. All rights reserved. Powered by Veegam