A couple of days back, we reported ‘Openness Clickjacking’ malware influencing around 500 million Android gadgets. Presently, Trend Micro has shocked us with its new finding. Pattern Micro reported that cell phones by Qualcomm Snapdragon processors could be misused by any vindictive application to pick up root access. In the event that we trust in Qualcomm’s case, more than more than 1 billion gadgets use Snapdragon Soc putting every one of these gadgets into danger. 

Picking up root access is a difficult issue as it gives malicious application administrator level abilities. An assailant can get to your information, including photographs, recordings, messages, messages and other. In spite of the fact that Google has now settled the defenselessness, we can’t say what number of gadgets will get the security redesigns. I am stating this on the grounds that the upgrade will experience the long chain.

The organization’s own site takes note of that Qualcomm Snapdragon SoCs (frameworks on a chip) control more than a Billion Smart gadgets, including numerous Internet of Things (IoTs) starting today. Consequently, the issue puts numerous individuals at danger of being assaulted.

Root access of Android Device

Utilizing these two adventures, one can pick up root access on a Snapdragon-fueled Android gadget. This should be possible by means of a malignant application on the gadget. To counteract further assaults that might target either the fixed vulnerabilities or comparable ones that have yet to be found, we are not unveiling the full points of interest of this assault. We will reveal more subtle elements at my discussion at the Upcoming Hack In The Box security meeting in the Netherlands, to be held in late May 2016. 

Vulnerable devices are: 

The framework call perf_event_open (which is utilized by this assault) is open on most advanced mobile phones. Be that as it may, merchants can intensely tweak the portion and SELinux strategies of their gadgets, making it hard to recognize which gadgets are powerless. 

As per Google’s February security announcement, CVE-2016-0805 influences form sooner than 4.4.4 to 6.0.1. We can’t exhaustively test all Android gadgets, however, our own particular testing shows the accompanying gadgets are influenced: 

Nexus 5 

Nexus 6 

Nexus 6P 

Samsung Galaxy Note Edge 

We trust that any Snapdragon-fueled Android gadget with a 3.10-rendition part is possibly at danger of this assault. As said before, given that a significant number of these gadgets are either never again being fixed or never gotten any patches in any case, they would basically be left in a frail state with no patch inevitable.