► In brief
- Google and Qualcomm reveal massive flaws in Android
- Qualcomm appears to have fixed its vulnerability
- Google is working to completely resolve the flaw
All the lights are red at Qualcomm and Google. The two companies, one at the origin of most smartphone processors, the other in charge of the Android operating system, have in turn announced the discovery of flaws within the OS itself. A two-headed threat therefore, which for the moment does not seem to be in the process of being resolved.
Qualcomm reveals a flaw (and fixes it)
A few days ago, Qualcomm revealed that it had discovered CVE-2024-43047, a flaw with the sweet name of a chemical component. With a CVSS severity score of 7.8/10, it already worried experts about the risks faced by users, opening the possibility for potential hackers to deploy malicious code on infected devices. Just corrected, the flaw is being stolen by another one, this time discovered by Google.
A new Zero Day flaw on Android
This new vulnerability is called CVE-2024-43093. Few elements were revealed by experts from the TAG (Threat Analysis Group), Google’s specialist team on the subject, for security reasons. But if this relative secrecy seems to limit the risks of exploitation of the flaw by hacker groups, fears seem to be high on the Mountain View side following the discovery of this gateway present within Android.
When will the flaw be resolved?
For now, Google seems to have taken the full measure of the risk, by deploying an initial security patch aimed at limiting the extent of the threat. However, it should be noted that the fault as a whole still remains partially active. While waiting for a definitive patch, users are therefore invited to activate automatic updating of their devices, in order to allow their version of Android to integrate all the necessary security measures as quickly as possible.
Morocco
