Skip to content
Pangu

Pangu

  • Home
  • Xiaomi phones
  • Pangu jailbreak
  • Pangu firmware
  • Telecoms finance
  • Accounts
  • Terms and Conditions
  • Privacy Policy
Watch Online
  • Home
  • Xiaomi phones
  • Security flaws identified in MediaTek smartphone chips
  • Xiaomi phones

Security flaws identified in MediaTek smartphone chips

Kelly Choos November 25, 2021 2 min read


New Delhi: Taiwanese chipset maker MediaTek’s chips found in 37% of the world’s smartphones, including those from Xiaomi, Oppo, Realme, Vivo, among others, have a security flaw inside the processor audio from the chip. Without a patch, the vulnerabilities could have allowed a hacker to spy on an Android user and also hide malicious code in MediaTek-powered handsets. The chipmaker fixed these security issues.

According to security researchers at Check Point Research, MediaTek chips contain a special AI processing unit (APU) and digital audio signal processor (DSP) to improve media performance and reduce CPU usage. Both the APU and Audio DSP have custom microprocessor architectures, making MediaTek DSP a unique and exciting target for security research.

The researchers wanted to know to what extent MediaTek DSP could be used as an attack vector for threat actors. For the first time, they were able to reverse engineer the MediaTek audio processor, revealing several security holes.

“MediaTek is known to be the most popular chip for mobile devices. Given its ubiquity around the world, we began to suspect that it could be used as an attack vector by would-be hackers. We embarked on research into the technology, which led to the discovery of a chain of vulnerabilities that could potentially be used to reach and attack the chip’s audio processor from an Android application. Without a patch, a hacker could potentially have exploited the vulnerabilities to eavesdrop on Android users’ conversations, ”Slava Makkaveev, security researcher at Check Point Software, said in a statement.

The investigation found that the security bugs could have been misused by the device makers themselves to create a massive eavesdropping campaign.

“While we see no specific evidence of such misuse, we moved quickly to disclose our findings to MediaTek and Xiaomi. In summary, we have proven a whole new attack vector that could have abused the API. Android Our message to the Android community is to update their devices with the latest security patch in order to be protected, ”Makkaveev added.

If not fixed, the security holes could have allowed a hacker to spy on an Android user and / or hide malicious code. Since the vulnerability has been fixed for all Android smartphone manufacturers, users of Vivo, Oppo, Realme, and Xiaomi phones with a MediaTek-powered handset should ensure that they download the latest update to their device to eliminate any security bug.


Related posts:

  1. Xiaomi and Oppo develop their very own 5G chips for smartphones: report
  2. Redmi’s gaming telephone with Dimensity 1200 might launch this month
  3. Xiaomi will launch extra Mi 11 telephones in India on April 23
  4. Android 11 rollout goes international for Asus Zenfone 7 and Zenfone 7 Professional

Continue Reading

Previous: Xiaomi highlights the strength of smartphones abroad
Next: Redmi K50 Pro to be renamed Xiaomi 12X in India and POCO F4 Pro in the global market: report

Related Stories

We wish Samsung’s foldable phones didn’t mean a slimmer wallet either
2 min read
  • Xiaomi phones

We wish Samsung’s foldable phones didn’t mean a slimmer wallet either

August 10, 2022
One UI 5 beta is now available in the US, South Korea and Germany, still only for the Galaxy S22 series
6 min read
  • Xiaomi phones

One UI 5 beta is now available in the US, South Korea and Germany, still only for the Galaxy S22 series

August 9, 2022
Weekly poll: is the OnePlus 10T the one to get or the one to skip?
2 min read
  • Xiaomi phones

Weekly poll: is the OnePlus 10T the one to get or the one to skip?

August 7, 2022

Categories

app store ios device ios ios ios jailbreak iphone ipad ipod touch jailbreak ios jailbreak tool operating system pangu jailbreak pangu team running ios united states version ios xiaomi mi

  • Accounts
  • Pangu firmware
  • Pangu jailbreak
  • Telecoms finance
  • Xiaomi phones

Recent posts

Recent Posts

  • 3 Ways to Manage Your Finances

  • We wish Samsung’s foldable phones didn’t mean a slimmer wallet either

  • One UI 5 beta is now available in the US, South Korea and Germany, still only for the Galaxy S22 series

  • Weekly poll: is the OnePlus 10T the one to get or the one to skip?

  • SG Americas Securities LLC sells 11,522 shares of Comtech Telecommunications Corp. (NASDAQ: CMTL)

  • Google contracts production of Pixel 7 and Pixel Foldable to Foxconn

Archives

  • August 2022
  • July 2022
  • June 2022
  • May 2022
  • April 2022
  • March 2022
  • February 2022
  • January 2022
  • December 2021
  • November 2021
  • October 2021
  • September 2021
  • August 2021
  • July 2021
  • June 2021
  • May 2021
  • April 2021
  • March 2021
  • February 2021
  • January 2021
  • November 2020
  • October 2020
  • September 2020
  • August 2020
  • July 2020
  • June 2020
  • March 2020
  • February 2020
  • January 2020
  • December 2019
  • November 2019
  • October 2019
  • August 2019
  • June 2019
  • April 2019
  • February 2019
  • October 2018
  • September 2018
  • August 2018
  • July 2018
  • May 2018
  • April 2018
  • March 2018
  • December 2017
  • November 2017
  • October 2017
  • September 2017
  • July 2017
  • June 2017
  • May 2017
  • April 2017
  • March 2017
  • February 2017
  • January 2017
  • December 2016
  • November 2016
  • October 2016
  • September 2016
  • August 2016
  • July 2016
  • June 2016
  • May 2016
  • April 2016
  • March 2016
  • February 2016
  • January 2016
  • December 2015
  • November 2015
  • October 2015
  • September 2015
  • August 2015
  • July 2015
  • June 2015
  • May 2015
  • April 2015
  • February 2015
  • January 2015
  • December 2014
  • November 2014
  • October 2014
  • August 2014
  • July 2014
  • June 2014
  • January 2014
  • November 2013
  • February 2013
  • December 2012

You may have missed

We wish Samsung’s foldable phones didn’t mean a slimmer wallet either
2 min read
  • Xiaomi phones

We wish Samsung’s foldable phones didn’t mean a slimmer wallet either

August 10, 2022
One UI 5 beta is now available in the US, South Korea and Germany, still only for the Galaxy S22 series
6 min read
  • Xiaomi phones

One UI 5 beta is now available in the US, South Korea and Germany, still only for the Galaxy S22 series

August 9, 2022
Weekly poll: is the OnePlus 10T the one to get or the one to skip?
2 min read
  • Xiaomi phones

Weekly poll: is the OnePlus 10T the one to get or the one to skip?

August 7, 2022
SG Americas Securities LLC sells 11,522 shares of Comtech Telecommunications Corp. (NASDAQ: CMTL)
5 min read
  • Telecoms finance

SG Americas Securities LLC sells 11,522 shares of Comtech Telecommunications Corp. (NASDAQ: CMTL)

August 6, 2022