8 years, 8 months ago

Vulnerability Exposes 900M Android Devices—and Fixing Them Won't Be Easy

The latest Android vulnerability to fret about isn’t limited to any particular device, or any specific firmware version. As security research firm Check Point detailed this week, the vulnerability in question is actually a set of four issues, collectively called QuadRooter, and affects Qualcomm chipsets from manufacturers ranging from HTC to LG to OnePlus to Google, which contracts with other makers for its own Nexus devices. “Android security updates are really hard,” says Jeff Zacuto, a member of Check Point’s Mobile Research team. There are a lot of different versions and variants of Android in the marketplace, because each individual device has its own particular nuances.” That’s not a new problem; even at the most basic level, only 15 percent of Android devices have updated to Android 6.0 Marshmallow, which Google released last October. That’s why, even though Qualcomm released patches for all four vulnerabilities between April and July, the fixes are still slow to reach actual devices.

Wired

Discover Related