Qualcomm Modem Security Hole Allows Hackers To Record User Phone Calls

Qualcomm Mobile Station (MSM) modem can be exploited by hackers to record phone calls and the like, according to a new report from Check Point Research. MSM dates back to the early 1990s and has been used in 4G, 3G, 2G and even 5G devices. It is now clear that the presence of a serious vulnerability could potentially hack Qualcomm modems remotely. This will make it easy to send a text message .

Qualcomm Modem Security Hole Allows Hackers To Record User Phone Calls


Malicious people can use this hole to listen to the user's calls and read his text messages, and can even unlock the user's SIM card in order to circumvent any restrictions imposed by telecommunications companies. According to reports, almost 30% of all smartphones in the world use chips made by Qualcomm, and these handsets are considered as potential targets for exploiting the mentioned security hole. Currently, the only possible action by users is to update their devices to the latest version of Android security patch.

"We were able to identify a security hole in the modem data service. This hole can be used to take control of the modem and its dynamic patch through the program processor. By exploiting this security hole, the attacker can inject the desired malicious code into the modem through the Android operating system. Doing so allows the attacker to access the user's call history and text messages and listen to his or her conversations. In addition, hackers can use this vulnerability to unlock users' SIM cards. "As a result, they can overcome the restrictions imposed by mobile service providers." - Check Point Research Institute.



According to an official statement posted on Tom's Guide website, Qualcomm had already introduced software updates for the MSM security hole in December 2020; So the next security patches had to fix this problem. Surprisingly, however, none of the Android security bulletins mention fixing this bug. According to some speculations, Google will publicly solve this problem with the release of the Android security patch in June.

About Steven Perry

This is a short description in the author block about the author. You edit it by entering text in the "Biographical Info" field in the user admin panel.

0 Comments:

Post a Comment

Your comment and facebook share will be appreciated