Affiliate links on Android Authority may earn us a commission.Learn more.
Qualcomm patches ‘critical’ flaw affecting over 40 chipsets
July 25, 2025
Qualcommchipsets are generally the processor of choice for many smartphone users, owing to the firm’s powerful graphics hardware and developer-friendly nature. It’s not immune to security flaws though, and its latest vulnerability is a big one.
Security researcher Keegan Ryan discovered the flaw last year,ZDNetreported, allowing cyber-criminals to gain private data and security keys in a secure part of the chipset. Ryan has since published awhite paperon the flaw this week, noting that he was able to extract security keys from a rooted Nexus 5X.
Meanwhile, Qualcomm hasconfirmedthat it patched the vulnerability, which it categorized as ‘critical.’ This is Qualcomm’s highest rating for security flaws; the firmsays‘critical’ vulnerabilities could allow someone to remotely control a device.
Google’sAndroid Security Bulletinnotes that the fix is included in the April 2019 security patches, but many Android manufacturers have skimped on security updates in the past. So that means people with older devices are still left at risk of being affected by the flaw. In fact, Qualcomm has confirmed that the vulnerability affects over 40 chipsets, including laptop, smartwatch, and automotive silicon.
Some of the more prominent smartphone chips affected by the flaw include the Snapdragon 200 series, Snapdragon 400 family (bar the Snapdragon 400 itself, it seems), Snapdragon 625, Snapdragon 636, Snapdragon 660, Snapdragon 670, Snapdragon 710/712, Snapdragon 820, Snapdragon 835, and Snapdragon 845. you may check out the full list over atQualcomm’s product security bulletin.
If you own a phone with one of these chipsets and haven’t received the April 2019 security patch, then you should nag the manufacturer. Google has taken action in this regard,reportedlymandating two years of security patches in contracts with manufacturers, but brands often fall behind in their timely delivery. It’s high time they took full responsibility.
NEXT:Don’t lag behind — Mario Kart Tour closed beta sign-ups are now live
Thank you for being part of our community. Read ourComment Policybefore posting.
