SNAPDRAGON-POWERED ANDROID SMARTPHONES are at risk from a "undetectable" Qualcomm software flaw that has left users' text messages and call histories open to hackers.
The flaw in question is CVE-2016-2060, and is described by FireEye offshoot Mandiant as a lack of input sanitization of the "interface" parameter of the "netd" daemon that is part of the Android Open Source Project (AOSP).

When Qualcomm introduced new APIs as part of the Android network manager system service, vulnerable phones were then connected to the "netd" daemon, which allowed an attacker to potentially perform tasks such as viewing a users' SMS database and phone history.
Those most at risk are the 34 per cent of Android users running versions 4.3 and earlier, as they lack a feature called Security Enhancements for Android (SEAndroid) and likely will remain unpatched.
The researchers note that the flaw, which can be exploited by a hacker physically unlocking an unprotected device or by the user installing a malicious application, is largely undetectable.
"Any application could interact
- See more at: http://www.duketundesblog.com/2016/05/do-you-use-android-smartphones-then-you.html#SZCiGtSuJduBHIAO.97