Google's Project Zero Team Says Google, Samsung, Xiaomi, Oppo did Not Deploy Security Patches for Mali GPUs Security Flaw

Google’s Project Zero team found a security flaw, and although it was flagged, companies, including Google, have not yet issued a security patch. ARM has already resolved the issues on its end back in July and August.

New Security Flaw Found in Phones that Use the Mali GPUs

According to the story by Engadget, Google has already disclosed multiple security flaws for phones that use Mali GPUs like the Exynos SoCs. The problems were flagged to ARM by the company’s Project Zero team.

Although flagged, Google itself, along with some other companies, did not flag the issue. ARM already fixed the issues on its end back in July and August, while Samsung, Xiaomi, Oppo, and Google have yet to release a security update as per Project Zero.

Person from Project Zero Explained the Issues and What It Could Lead to

In a blog post, Ian Beer of Project Zero shared that one of the issues ultimately led to kernel memory corruption. One led to the disclosure of the physical memory address to userspace, while the remaining three “led to physical page use-after-free condition.”

Beer noted that the issues would allow the hacker to gain full access to the system. Should the hackers gain full access, they can bypass the permission model on Android.

Hackers can Gain Broad Access to Users’ Data if They Can Bypass the Permission Model

When hackers bypass the permission model, they can gain broad access to widespread users’ data. The attacker can accomplish this by forcing the kernel to refuse the “aforementioned physical pages as page tables.”

So far, researchers have been able to identify five new issues back in June and July. So far, the researchers have already flagged them to ARM, which was met with quick action.

The Publication Tried to Contact Google, Oppo, Samsung, and Xiaomi Regarding the Delay

Project Zero was also able to find that three months after ARM decided to fix the issues, all of the test devices of the team were still vulnerable to the flaw. It was also noted that the issues were not mentioned: “in any downstream security bulletins” coming from manufacturers of Android devices.

The article notes that they have tried to contact Google, Oppo, Samsung, and Xiaomi about why it takes them so long to deploy the security fixes. They also asked when the security fixes might launch for Android devices.

So Far, the Samsung Galaxy S22 Series Remain Unfazed by the Issue

Regarding Samsung, a particular series of devices is reportedly not vulnerable to this issue. This is because they use a different chip.

An article by Sam Mobile notes that the Samsung Galaxy S22 series devices and the company’s Snapdragon-powered handsets are not affected by the vulnerability. This is because the devices use a different type of chip that is not vulnerable to the issue.

Written by Urian B.

NEWS RELATED

Redmi Note 12 5G will get the Snapdragon 4 Gen 1 in India

Xiaomi is gearing up to introduce the Redmi Note 12 5G in India pretty soon. To those unaware, the Redmi Note 12 series reached China in late October and now is making its way to India. The brand prepares to launch the Note 12 5G, 12 Pro, and 12 Pro+. ...

View more: Redmi Note 12 5G will get the Snapdragon 4 Gen 1 in India

Redmi Note 12 Pro Speed Edition to launch alongside the K60 series this 27 December

As we’ve alluded to in our previous article, Redmi is set to release 5 new products at its Redmi K60 series launching event next Tuesday (27 December 2022), one of which will be the Redmi Note 12 Pro Speed Edition. Yet another variant of the Note 12 series, Redmi confirmed ...

View more: Redmi Note 12 Pro Speed Edition to launch alongside the K60 series this 27 December

Here’s a first look at the Redmi Watch 3, Band 2 and Buds 4 Lite before their 27 December release

Previously, we reported that Redmi will be releasing the Redmi K60 series at an event in China next Tuesday (27 December 2022). Now, more details have emerged, as Redmi has confirmed that the event will also see the launch of several AIoT devices, including the Redmi Watch 3, Band ...

View more: Here’s a first look at the Redmi Watch 3, Band 2 and Buds 4 Lite before their 27 December release

MIUI 14 (Android 13) is now available for these Xiaomi devices

Xiaomi recently released the MIUI development version V14.0.22.12.19.DEV, V14.0.22.12.20.DEV, V14.0.22.12.21.DEV for some devices. According to reports, the following devices are testing the update Xiaomi Mi MIX FOLD Xiaomi Pad 5 Pro 5G Xiaomi Pad 5 Pro Xiaomi Pad 5 Xiaomi Mi 11 Youth Vitality Edition However, from all the devices ...

View more: MIUI 14 (Android 13) is now available for these Xiaomi devices

Xiaomi's new advanced cooling patent promises faster charging and improved longevity for EV batteries

While some car enthusiasts love the roar of a powerful combustion engine, more consider EVs are the future. But EVs are far from mainstream, as there are many technological bottlenecks to overcome like the battery. Recently, sources found a Xiaomi patent related to EV batteries. According to ITHome, Xiaomi ...

View more: Xiaomi's new advanced cooling patent promises faster charging and improved longevity for EV batteries

Xiaomi blossomed as Apple fell in mobile phone sales

The mobile phone market especially in China is very complex. There are no less than four mobile phone brands that are struggling for the top spot. There is no other large market in the world that has such competition. At the beginning of this year, Xiaomi CEO, Lei Jun publicly stated ...

View more: Xiaomi blossomed as Apple fell in mobile phone sales

It’s Confirmed! Redmi K60 Series Will Officially Unveil on December 27!

Xiaomi is all set to announce the much-awaited Redmi K60 series on December 27 in China. The brand has just announced the date on Weibo, and it also unveiled that the new series will not have a Gaming-specific phone. According to the brand, the early release of the series is a New Year’s ...

View more: It’s Confirmed! Redmi K60 Series Will Officially Unveil on December 27!

Redmi K60 series to launch on 27 December, features SD 8 Gen 2, 16GB LPDDR5x RAM and 512GB UFS 4.0 storage

The Redmi K60 series has been in the rumour mills for a while now and today, the Xiaomi subsidiary finally reveal its launch date as well as tech specs. Taking to its official Weibo account, Redmi announced that the series will debut in China on 27 December 2022 and ...

View more: Redmi K60 series to launch on 27 December, features SD 8 Gen 2, 16GB LPDDR5x RAM and 512GB UFS 4.0 storage

Samsung’s smartphone revenue witnesses a dip in Q3 2022

A New Round Of Xiaomi Layoffs Commenced

Redmi K60 series will be unveiled at the end of this month

Xiaomi Pad 6 Will Be Launched Along With Xiaomi 13 Ultra

TOP 9 smartphone brands offering the highest customer satisfaction

Xiaomi 13 vs iPhone 14 Pro vs Samsung Galaxy S22: Design Comparison

OPPO will present QRIC as its first robot dog during OPPO INNO DAY

Xiaomi Watch S2 lands in China

Samsung’s flagship foldable has a lower profit margin than Huawei’s

MIUI 14 is official: Features and eligible devices

Xiaomi unveils a Mac mini rival: a small powerful desktop PC

Redmi Note 12 5G Series India launch date tipped

OTHER NEWS