Published in News

Qualcomm's Adreno GPU had a serious bug

by on13 August 2024


Since patched

At the Defcon security conference in Las Vegas, three Google researchers presented over nine vulnerabilities in Qualcomm's Adreno GPU, which have now been patched.

These vulnerabilities were found in the software used to coordinate between GPUs and operating systems like Android on Qualcomm-powered phones. The flaws could allow attackers to take full control of a device.

The researchers highlighted that GPU drivers, which have deep privileges in the kernel of an operating system, are crucial for coordinating between hardware peripherals and software. Unlike other parts of the system, GPU drivers can be accessed by applications without additional permissions, making them attractive targets for attackers.

The vulnerabilities stem from the complex interconnections that GPU drivers must navigate. Attackers would need to first gain access to a target device, potentially by tricking users into installing malicious apps.

 Qualcomm has released patches to original equipment manufacturers (OEMs), and users are encouraged to apply security updates as they become available.

This discovery underscores the growing importance of securing GPU infrastructure as GPUs become more central to mobile phone operations.

Last modified on 13 August 2024
Rate this item
(2 votes)