Billions of smartphones at risk of attack due to Qualcomm chips

The world's leading chip maker Qualcomm recently disclosed four zero-day vulnerabilities in its chips used in billions of smartphones and other devices around the world.

The vulnerabilities have been exploited in a number of targeted attacks, allowing hackers to take control of devices or steal sensitive data.

Qualcomm said: "There is information from the Google Threat Analysis Group and Google Project Zero that CVE-2023-33106, CVE-2023-33107, CVE-2022-22071, and CVE-2023-33063 may be being exploited against specific targets."

Qualcomm has released patches for the vulnerabilities and is urging device manufacturers (OEMs) to update as soon as possible. However, until the patches are widely deployed, users of affected devices will remain vulnerable to attack.

According to security expert Vu Ngoc Son, Technical Director of Vietnam Cyber ​​Security Technology Company, software such as browsers or applications having vulnerabilities is relatively common and can be prevented by temporarily not using the faulty application while waiting for an update. However, if the vulnerability is in the phone's chip, users can only wait for an update from the manufacturer.

"While waiting for the update, users should limit clicking on links sent via chat or email, and should not open files if they do not know the source," said expert Vu Ngoc Son.