Phone chipmaker Qualcomm fixes three zero-days exploited by hackers
Chipmaker giant Qualcomm released patches on Monday fixing a series of vulnerabilities in dozens of chips, including three zero-days that the company said may be in use as part of hacking campaigns.
Qualcomm cited Google's Threat Analysis Group, or TAG, which investigates government-backed cyberattacks, saying the three flaws 'may be under limited, targeted exploitation.'
According to the company's bulletin, Google's Android security team reported the three zero-days (CVE-2025-21479, CVE-2025-21480, and CVE-2025-27038) to Qualcomm in February. Zero-days are security vulnerabilities that are not known to the software or hardware maker at the time of their discovery, making them extremely valuable for cybercriminals and government hackers.
Because of Android's open source and distributed nature, it's now up to device manufacturers to apply the patches provided by Qualcomm, which means some devices may still be vulnerable for several more weeks, despite the fact that there are patches available.
Contact Us Do you have more information about these Qualcomm zero-days? Or other zero-day exploits or zero-day makers? From a non-work device and network, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or
Do you have more information about these Qualcomm zero-days? Or other zero-day exploits or zero-day makers? From a non-work device and network, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or email .
Qualcomm said in the bulletin that the patches 'have been made available to [device makers] in May together with a strong recommendation to deploy the update on affected devices as soon as possible.'
Google spokesperson Ed Fernandez told TechCrunch that the company's Pixel devices are not affected by these Qualcomm vulnerabilities.
When reached by TechCrunch, a spokesperson for Google's TAG did not immediately provide more information about these vulnerabilities, and the circumstances in which TAG found them.
Qualcomm did not respond to a request for comment.
Chipsets found in mobile devices are frequent targets for hackers and zero-day exploit developers because chips generally have wide access to the rest of the operating system, which means hackers can jump from there to other parts of the device that may hold sensitive data.
In the last few months, there have been documented cases of exploitation against Qualcomm chipsets. Last year, Amnesty International identified a Qualcomm zero-day that was being used by Serbian authorities, likely by using phone unlocking tool maker Cellebrite.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
23 minutes ago
- Yahoo
3 hurt after shooting in Sacramento early Sunday
The Sacramento Sheriff's Office is investigating a shooting that left three people hospitalized in Sacramento, according to officials. The shooting happened on Little Oak Lane around 1:49 a.m. Sunday.
CBS News
32 minutes ago
- CBS News
Fred Smith, founder of FedEx and father of Steelers offensive coordinator, dies at 80
Fred Smith, the founder of the FedEx Corporation, which revolutionized express delivery, and father of the Steelers' offensive coordinator, has died at 80, according to Memphis Mayor Paul Young. "Fred Smith was more than a business leader; he was a visionary whose ideas reshaped not only the global economy but the very identity of Memphis," said Mayor Young. "When he founded FedEx, he didn't just launch a company, he changed the way the world moves." Smith, the Marine Corps veteran, started FedEx in the 1970s, and in 1973, it began operation. They delivered small parcels and documents at first, and it ultimately grew into a global transportation and logistics company with an average of 17 million shipments per day. Smith would step down as CEO in 2022 but would remain as the executive chairman of the company. "As we begin to process this tremendous loss, it is important that we take care of one another and demonstrate the passion and compassion that Fred embodied every day," said Raj Subramaniam, FedEx President, CEO, and Director. "In the coming days and weeks, I know we will all find ways to honor his memory and pay tribute to his legacy." In a 2023 interview with the Associated Press, Smith discussed a gift to the Marine Corps Scholarship Foundation that he believed could grow in value to $65 million. "The thing that's interested me are the institutions and the causes, not the naming or the recognition," he said at the time. The Steelers hired Fred's son, Arthur, in 2024 after he spent 2021-23 as the head coach of the Atlanta Falcons. He has been a coach in the NFL since 2007, when he first was the defensive quality control coach for Washington. He would then go on to Tennessee, where he held multiple jobs, including defensive quality control coach, offensive quality coach, assistant offensive line coach, assistant tight ends coach, and offensive coordinator. We have reached out to the Steelers for comment and will update the story once we hear back.
Yahoo
33 minutes ago
- Yahoo
Upstart Holdings (NasdaqGS:UPST) Shares Surge 28% Over Last Month
Upstart Holdings recently announced a partnership with All In Credit Union to expand personal loan access, potentially influencing its share price movement. The company's stock rose by 28% over the past month, which stands out given the broader market was flat in the last week. This alignment with Upstart's strategies to broaden its reach and enhance service offerings might have added positive momentum to its stock performance, counterbalancing the overall market trends. The partnership emphasizes Upstart's proactive steps in leveraging its platform to offer customized loan solutions, enhancing its position within the financial technology sector. We've spotted 2 warning signs for Upstart Holdings you should be aware of. AI is about to change healthcare. These 22 stocks are working on everything from early diagnostics to drug discovery. The best part - they are all under $10b in market cap - there's still time to get in early. Upstart Holdings' recent partnership with All In Credit Union is positioned to enhance its loan portfolio by expanding personal loan access. This development aligns with Upstart's enhancements in underwriting and automation, potentially improving loan approval rates and reducing default risks. Such improvements could positively impact both revenue and earnings forecasts by increasing origination volumes and enhancing net margins. Analysts expect Upstart's revenue to grow significantly, reflecting these changes. Although Upstart's stock has risen 28% in the past month, it's important to note that the total shareholder return over the last year, including dividends, was a substantial 168.07%. Over the past year, Upstart's performance outpaced both the broader US market and the US Consumer Finance industry, which returned 10% and 30.5% respectively. The company's share price movement towards the consensus price target of US$56.63 indicates a slight discount of approximately 2.39%. This shows potential for further price adjustments if revenue and earnings forecasts are met. Still, the stock remains expensive based on its Price-To-Sales Ratio compared to industry averages. The ongoing developments will be crucial for future profitability and may influence investor confidence, supporting Upstart's positioning within the financial technology sector. Jump into the full analysis health report here for a deeper understanding of Upstart Holdings. This article by Simply Wall St is general in nature. We provide commentary based on historical data and analyst forecasts only using an unbiased methodology and our articles are not intended to be financial advice. It does not constitute a recommendation to buy or sell any stock, and does not take account of your objectives, or your financial situation. We aim to bring you long-term focused analysis driven by fundamental data. Note that our analysis may not factor in the latest price-sensitive company announcements or qualitative material. Simply Wall St has no position in any stocks mentioned. Companies discussed in this article include NasdaqGS:UPST. This article was originally published by Simply Wall St. Have feedback on this article? Concerned about the content? with us directly. Alternatively, email editorial-team@
