Today we know that the exploit QuadRooter reported in April infected more than 900 million devices with Android and Qualcomm chips. Among them there are also Samsung Galaxy S7, and LG G5.
QuadRooter allows attacking unit in 4 different ways, but it all starts with getting administrative access by a malicious application installed by a user, which during the installation does not demand any special privileges. The attack can be carried out only on devices with Qualcomm processor, ie for example Nexus 5X, Nexus 6, Nexus 6P, HTC 10, LG G5, OnePlus 3, Samsung Galaxy S7 and Galaxy S7 Edge, but the list is of course much longer.
Qualcomm promised in accordance with the deadline imposed by the CERT-CC (Computer Emergency Response Team Coordination Center), providing operators and manufacturers of mobile the solution by the end of July - and 3 patches were attached to the final security Google bulletin. Last, the fourth will be delivered in the next, September bulletin, but it's possible that it will be implemented earlier by manufacturers in the individual updates.
Source ZDNet
