Qualcomm confirms hackers exploited security flaw in over 60 chips

Qualcomm confirmed this week that hackers exploited a zero-day security vulnerability in 64 of its chips, including the Snapdragon 8 Gen 1 and other 800 series chips, FastConnect chips, modems and more.

The vulnerability, dubbed a zero-day because the flaw was unknown to hardware makers when it was exploited, received a patch in September 2024, though the company told TechCrunch it remains up to device makers to push the fix to consumers’ devices. The flaw was officially designated ‘CVE-2024-43047.’

In a security bulletin shared on its website, Qualcomm said that the vulnerability “may be under limited, targeted exploitation” based on “indications” from Google’s Threat Analysis Group (TAG). U.S. cybersecurity agency CISA also included the flaw in a list of vulnerabilities that are known to be or have been exploited.

However, there remain few details about who exploited the vulnerability or which individuals were targeted. Amnesty International’s Security Lab also confirmed the TAG assessment and will release research about the vulnerability “soon.”

For now, the best thing you can do is check if your Android device has any of the impacted Qualcomm chips. If so, be on the lookout for security updates with patches for CVE-2024-43047 and make sure to install them as soon as possible. You can find the full list of impacted Qualcomm chipsets below:

  • FastConnect 6700
  • FastConnect 6800
  • FastConnect 6900
  • FastConnect 7800
  • QAM8295P
  • QCA6174A
  • QCA6391
  • QCA6426
  • QCA6436
  • QCA6574AU
  • QCA6584AU
  • QCA6595
  • QCA6595AU
  • QCA6688AQ
  • QCA6696
  • QCA6698AQ
  • QCS410
  • QCS610
  • QCS6490
  • Qualcomm Video Collaboration VC1 Platform
  • Qualcomm Video Collaboration VC3 Platform
  • SA4150P
  • SA4155P
  • SA6145P
  • SA6150P
  • SA6155P
  • SA8145P
  • SA8150P
  • SA8155P
  • SA8195P
  • SA8295P
  • SD660
  • SD865 5G
  • SG4150P
  • Snapdragon 660 Mobile Platform
  • Snapdragon 680 4G Mobile Platform
  • Snapdragon 685 4G Mobile Platform (SM6225-AD)
  • Snapdragon 8 Gen 1 Mobile Platform
  • Snapdragon 865 5G Mobile Platform
  • Snapdragon 865+ 5G Mobile Platform (SM8250-AB)
  • Snapdragon 870 5G Mobile Platform (SM8250-AC)
  • Snapdragon 888 5G Mobile Platform
  • Snapdragon 888+ 5G Mobile Platform (SM8350-AC)
  • Snapdragon Auto 5G Modem-RF
  • Snapdragon Auto 5G Modem-RF Gen 2
  • Snapdragon X55 5G Modem-RF System
  • Snapdragon XR2 5G Platform
  • SW5100
  • SW5100P
  • SXR2130
  • WCD9335
  • WCD9341
  • WCD9370
  • WCD9375
  • WCD9380
  • WCD9385
  • WCN3950
  • WCN3980
  • WCN3988
  • WCN3990
  • WSA8810
  • WSA8815
  • WSA8830
  • WSA8835

Header image credit: Shutterstock

Source: Qualcomm Via: TechCrunch

MobileSyrup may earn a commission from purchases made via our links, which helps fund the journalism we provide free on our website. These links do not influence our editorial content. Support us here.

Leave a Comment