Hackers Target Android Users Through Zero-Day Vulnerability in Qualcomm Snapdragon Chips

Qualcomm revealed on Monday that hackers exploited an unknown security flaw in several of its chipsets used in popular Android devices. This zero-day vulnerability, identified as CVE-2024-43047, was not known to Qualcomm when it was abused. Google's Threat Analysis Group (TAG) and Amnesty International's Security Lab confirmed the exploitation.

The U.S. cybersecurity agency CISA has added this Qualcomm flaw to its list of vulnerabilities that are known to be exploited. However, details about the individuals or groups exploiting this vulnerability remain scarce. It is unclear who the targets were or the motives behind these hacking campaigns.

Limited Exploitation and Affected Devices

According to Qualcomm, the exploitation appears to be limited and targeted. This suggests that specific individuals were likely targeted rather than a broad range of users. The affected chipsets include 64 different models, notably the Snapdragon 8 (Gen 1) mobile platform. This chipset is found in numerous Android phones from brands like Motorola, Samsung, OnePlus, Oppo, Xiaomi, and ZTE.

Catherine Baker, a spokesperson for Qualcomm, praised Google Project Zero and Amnesty International Security Lab for their coordinated disclosure practices. This collaboration enabled Qualcomm to develop fixes for the vulnerability promptly. The company has made these fixes available to its customers since September 2024.

Awaiting Further Details

Amnesty International's spokesperson Hajira Maryam mentioned that research regarding this vulnerability will be released soon. Meanwhile, Google spokesperson Kimberly Samra stated that TAG currently has no additional information to provide.

Qualcomm has passed the responsibility of releasing patches to Android device manufacturers using the affected chipsets. These manufacturers must now ensure their customers receive updates to protect against potential threats.

The involvement of Google and Amnesty International in investigating this zero-day underlines its significance. Their focus on "limited, targeted exploitation" indicates a more focused attack rather than widespread targeting.

This situation highlights the ongoing challenges in cybersecurity where vulnerabilities can be exploited before they are even discovered by manufacturers. It underscores the importance of swift action and collaboration among tech companies and security researchers to safeguard users worldwide.

Source