How serious are actually the vulnerabilities in Android chips - Qualcomm and Mediatek?

Privacy Questions
1

I always see posts how android has delayed and inconsistent patching, that androids are insecure in comparison to iPhone etc. I never heard someone getting their android hacked. Like no stories or something of someone loosing bank access or nude pics because they used a Samsung that did not received updates in the last 4 months…
Some sources claim that android hacking is done usually thorugh a chain of vulnerabilities so missing a month or two of updates is not that critical.
Recently another Qualcomm vulnerability was marked as critical and could lead to remote code execution. How realistic are those exploits? Is it that easy to hack androids?

2

Way easier to just create a shitty app that spams people with scam ads than to actually chain “proper” exploits to achieve that as far as I’ve seen

If you’re a cop with your little cellebrite tool, yes, unless the android phone is a pixel

1 Like
3

Indeed, it is not realistic for most. This is why we put relatively little emphasis on this sort of thing (installing custom ROMs or buying new phones) compared to much more effective steps to improve your privacy and security, like making better browser and service provider choices.

If you know you will actually be targeted by government agencies specifically, that is a different story and it becomes a lot more realistic. There are countless confirmed stories in the media of Android and iOS devices being hacked by companies like Cellebrite. And in these cases, modern devices that are fully up to date nearly always fare better. This is a minority of people, but certainly not nobody, so it could include you or other community members here.

As always, it is up to you to understand what potential risks you face and to plan according to your own needs.

4

If you invite them in by installing malicious apps, its much easier for hackers.

It happens all the time, thats why opsec is always the most inportant thing, a vault cant secure your property if you leave it unlocked.

5

I never heard someone getting their android hacked.

Cellebrite Premium has entered the chat