Modem vulnerability could let hackers listen to your calls on millions of Android phones

guest · May 7, 2021

Modem vulnerability could let hackers listen to your calls on millions of Android phones
The Qualcomm issue affects an estimated 40% of Android phones
May 6, 2021
https://www.androidpolice.com/2021/...-to-your-calls-on-millions-of-android-phones/

Google and other Android manufacturers try to keep on top of the hardware and software security, at varying degrees of intensity. But a vulnerability in widely-used Qualcomm SoCs disclosed by Check Point Research today was particularly alarming. It could theoretically allow a malicious app to patch the software for Qualcomm's MSM modem chips, giving it access to call and text history or even the ability to record conversations.

Check Point's breakdown of the issue is extremely technical. But to put it in layman's terms, vulnerabilities were found in the connections between the Qualcomm Modem Interface (QMI) software layer of the modem and the debugger service, allowing it to dynamically patch the software and bypass the usual security mechanisms
Click to expand...

Check Point Research: Security probe of Qualcomm MSM data services

We discovered a vulnerability in a modem data service that can be used to control the modem and dynamically patch it from the application processor. An attacker can use such a vulnerability to inject malicious code into the modem from Android. This gives the attacker access to the user’s call history and SMS, as well as the ability to listen to the user’s conversations. A hacker can exploit the vulnerability to unlock the SIM, thereby overcoming the limitations of the service providers imposed on the mobile device.
Click to expand...

hawki · May 7, 2021

"Fret not, Samsung’s been fixing Qualcomm’s security flaw since January

Up until today, the May 2021 security patch changelog made no mentions of the ‘CVE-2020-11292‘ vulnerability — as it was labeled by Qualcomm. But today, Samsung updated the page to include new information regarding the issue, and it turns out that Galaxy smartphone and tablet users are safer than initially suspected, all thanks to Samsung’s efforts.

...the company’s been patching Select devices since January of 2021...

...the May 2021 security update does indeed address the Qualcomm security flaw. Samsung confirmed this earlier today after it updated its security bulletin for the latest patch.

...the fix is now a part of the latest security patch which has already been released for numerous low-to-high-end Galaxy smartphone models..."

https://www.sammobile.com/news/fret-not-samsung-fixing-qualcomm-security-flaw-since-january/

Log in or Sign up

Modem vulnerability could let hackers listen to your calls on millions of Android phones

guest Guest

hawki Registered Member

Log in or Sign up

Modem vulnerability could let hackers listen to your calls on millions of Android phones

guest Guest

hawki Registered Member

Useful Searches