Home Qualcomm confirms zero-day flaw exploited to target Android devices

Qualcomm confirms zero-day flaw exploited to target Android devices

TLDR

  • Qualcomm confirmed a zero-day flaw in its chips used in various Android devices.
  • The vulnerability, CVE-2024-43047, may have been exploited in targeted hacking efforts.
  • A patch has been issued, and users can check their device's chip under "About phone."

Qualcomm has confirmed that hackers have exploited a zero-day flaw in its chips used in multiple Android devices. 

The semiconductor firm released limited information on the vulnerability in its October security bulletin

The security exploit, known as zero-day because it was unknown to the manufacturer when it was manipulated, could have been used on an array of phones and devices and although a patch has been issued, the details are relatively vague. 

We still don’t know to what extent or how many users have been impacted by the flaw.

Officially designated as CVE-2024-43047, the zero-day vulnerability “may be under limited, targeted exploitation,” said Qualcomm, citing unspecified “indications” from Google’s Threat Analysis Group. 

Qualcomm – which recently offered more insight on its AR collaboration with Samsung and Google – also advised it received the same assessment of the situation from Amnesty International’s Security Lab, which strives to protect civil society from digital surveillance and espionage threats.

There is no significant understanding of who was orchestrating the vulnerability in the wild, meaning whoever it was, appears to have targeted individuals in real hacking efforts. 

Qualcomm and the researchers are also unaware of who the campaigns were aimed at.

How do I find out if my chip was potentially targeted?

Catherine Baker, a spokesperson for the chip maker, told TechCrunch they commend “the researchers from Google Project Zero and Amnesty International Security Lab for using coordinated disclosure practices,” enabling Qualcomm to focus on the response and to implement fixes for the flaw.

Qualcomm chips are found in Samsung, Motorola, OnePlus, and many more brands’ phones, with a full list of potentially impacted chips available on the company’s security explainer page.

To check if your device was potentially targeted by hackers, you’ll need to compare your chip to the full list. 

You can find your CPU on your Android phone by navigating to Settings, then selecting System, and tapping on the option for About phone or About device. 

On this screen, you should see your chip listed under Processor.

Image credit: Via Ideogram

About ReadWrite’s Editorial Process

The ReadWrite Editorial policy involves closely monitoring the gambling and blockchain industries for major developments, new product and brand launches, game releases and other newsworthy events. Editors assign relevant stories to in-house staff writers with expertise in each particular topic area. Before publication, articles go through a rigorous round of editing for accuracy, clarity, and to ensure adherence to ReadWrite's style guidelines.

Graeme Hanna
Freelance Journalist

Graeme Hanna is a full-time, freelance writer with significant experience in online news as well as content writing. Since January 2021, he has contributed as a football and news writer for several mainstream UK titles including The Glasgow Times, Rangers Review, Manchester Evening News, MyLondon, Give Me Sport, and the Belfast News Letter. Graeme has worked across several briefs including news and feature writing in addition to other significant work experience in professional services. Now a contributing news writer at ReadWrite.com, he is involved with pitching relevant content for publication as well as writing engaging tech news stories.