QuadRooter Security issue: Google says most devices are protected

Google has responded to the QuadRooter vulnerability, saying devices with Apps Verification are protected.

Google, Google QuadRooter, Google Apps Verification, Google Verified apps, QuadRooter Qualcomm, QuadRooter security issue, QuadRooter security patch

Google said it is aware of the Quadrooter issue, and Android phones running the latest security patch are already protected against it. (Source: Reuters)

Google has responded to the QuadRooter vulnerability, that is believed to affect over 900 million Qualcomm chipset-powered Android phones. The Search giant said it is aware of the issue, and Android phones running the latest security patch are already protected against three of the security flaws pointed out.

Google issued a statement to AndroidCentral and a spokesperson for the company said, “The fourth vulnerability, CVE-2016-5340, will be addressed in an upcoming Android security bulletin, though Android partners can take action sooner by referencing the public patch Qualcomm has provided.” Google also added the Verify Apps and SafetyNet protections are designed to block any such application which has malware and can block apps, which choose to exploit vulnerabilities like QuadRooter.

The apps verification feature has been part of Google’s Android 4.2 Jelly Bean and is enabled by default. Apps Verification is useful because it ensures that downloads from outside the Google Play Store are scanned for malware before and after you install them on your device. Google says this works for all apps and ensures the QuadRooter vulnerability is not exploited by any malicious app.

The security issue was revealed security firm Check Point Software Technologies at the annual security conference DEF CON 24 in Las Vegas, Nevada. According to the report, QuadRooter is a set of four vulnerabilities affecting Android devices running on Qualcomm chipsets. Using any of these four vulnerabilities, an attacker can exploit a device by gaining root access to a user’s phone, or trigger privilege escalation by the use of a malicious app.

Also read: QuadRooter vulnerability leaves 900 mn Qualcomm-powered Android phones at risk

The security firm had found the issue existed with Qualcomm’s software drivers that come with its chipset, and it can only be fixed with a software patch from the carrier, who can only push it after receiving a patch from Qualcomm. Qualcomm was told about these vulnerabilities by the team in April this year.