Four newly identified vulnerabilities could affect 900 million Android devices, Check Point researchers disclosed. The vulnerabilities, which the researchers dubbed “QuadRooter,” affect Android devices that use Qualcomm chipsets. They exist in the chipset software drivers. The drivers, which control communications between chipset components, are incorporated into Android builds manufacturers develop for their devices, so they’re preinstalled on devices and can be fixed only through installation of a patch from the distributor or carrier.
Google argues that in more recent releases the verify app protection alleviates some of this. But I know having had to install Amazon video app that I had to turn off this security feature because Amazon video app is not available through the Google Play store. Amazon makes you download it and install it as a unverified app. Yes, you can turn very app security back on after installing the app. But when a update comes out for that app you probably will have to disable it again. Just the fact many users install apps outside of the Google Play ecosystem. means that this is a valid security risk. Not to mention the horrible update process with the Android system in general. Some of these devices could be exposed forever for a lack of an update. To me this definitely makes me rethink Android as a good mobile OS. If my device doesn't get a timely update which at the moment is exposed to 3 of these threats. I will seriously have to rethink even keeping the device.
Loading ...
900 Million Androids Could Be Easy Prey for QuadRooter Exploits
Posted by: Richard Adhikari August 9, 2016 03:20 PMFour newly identified vulnerabilities could affect 900 million Android devices, Check Point researchers disclosed. The vulnerabilities, which the researchers dubbed “QuadRooter,” affect Android devices that use Qualcomm chipsets. They exist in the chipset software drivers. The drivers, which control communications between chipset components, are incorporated into Android builds manufacturers develop for their devices, so they’re preinstalled on devices and can be fixed only through installation of a patch from the distributor or carrier.