Warning for Android devices: Vulnerability in Qualcomm processors allows access to hackers.
It has been reported that Qualcomm chips used in phones from brands such as Samsung, Motorola, OnePlus, and others may have been compromised.
Qualcomm has identified a critical zero-day vulnerability affecting numerous smartphones and tablets from well-known brands that utilize its processors. The flaw, known as CVE-2024-43047, impacts various high-end mobile CPU models from the chip manufacturer. Among the affected processors are the Snapdragon 888+ and Snapdragon 8 Gen 1, which have been used in devices like the Samsung Galaxy S22, OnePlus 10 Pro, and Motorola Edge 30 Pro, among others. Qualcomm has indicated that this security vulnerability is "under limited and targeted exploitation," suggesting that it has not been widely utilized so far, although its existence remains alarming.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that Qualcomm chips present a post-release usage vulnerability stemming from memory corruption in DSP services, although there is currently no knowledge of its use in recent ransomware campaigns. Qualcomm has issued a patch to original equipment manufacturers, urging them to implement it as soon as possible. The affected chips are also found in devices from brands such as Xiaomi, Realme, Vivo, and ZTE.
Additionally, Qualcomm has introduced its new mobile processor, the Snapdragon 7 Gen 3, designed for mid-high-end smartphones. This chip promises a 15% increase in processing performance, 20% in energy efficiency, and up to a 50% improvement in graphical capabilities. Using a 4 nm manufacturing process, it features a design that includes one main core, three performance cores, and four efficiency cores. Although the frequency of these cores is lower compared to its predecessor, it is expected to significantly enhance facial detection accuracy assisted by AI and offer improvements in image and audio processing.
The new platform includes an AI system to enhance photo and video quality, with support for Ultra HDR and spatial audio, in addition to adopting the X63 modem, which provides downlink speeds of up to 5 Gbps. However, contrary to expectations, a Fast Connect 6700 connection modem has been chosen instead of the more advanced Fast Connect 6900. Changes have also been implemented in the ISP system, limiting slow-motion video recording to 120 fps, which is a decrease compared to its predecessor.
On the other hand, MediaTek is launching its Dimensity 9300 processor, which will compete directly with Qualcomm's Snapdragon 8 Gen 3. This chip, built on a 4 nm process, stands out with its four ARM Cortex-X4 core configuration capable of reaching 3.25 GHz, along with additional cores that provide robust performance for various tasks.
Security is also a critical point in the mobile device realm, with various vulnerabilities detected, such as those affecting Samsung's Exynos modems, which allow remote control of phones by attackers who only need to know the victim's phone number. This highlights the growing concern regarding security in the Android device ecosystem.
