Check Point Research discover vulnerabilities in smartphones chips embedded in 37% of smartphones around the world

-

 Highlights

 

·       Check Point Research discovered vulnerabilities in MediaTek’s chips, embedded in 37% of all smartphones globally

·       CPR discovered several vulnerabilities in the audio processor that are accessible from the Android user space

·       If exploited, attacker can potentially eavesdrop on the user from an unprivileged Android app



Introduction

Taiwan’s MediaTek has been the global smartphone chip leader since Q3 2020. MediaTek Systems on a chip (SoCs) are embedded in approximately 37% of all smartphones and IoT devices in the world, including high-end phones from Xiaomi, Oppo, Realme, Vivo and more.

 

Modern MediaTek SoCs, including the latest Dimensity series, contain a special AI processing unit (APU) and audio Digital signal processor (DSP) to improve media performance and reduce CPU usage. Both the APU and the audio DSP have custom Tensilica Xtensa microprocessor architecture. The Tensilica processor platform allows chip manufacturers to extend the base Xtensa instruction set with custom instructions to optimize particular algorithms and prevent them from being copied. This fact makes MediaTek DSP a unique and challenging target for security research.

 

In this study, we reverse-engineered the MediaTek audio DSP firmware and discovered several vulnerabilities that are accessible from the Android user space. The goal of our research was to find a way to attack the audio DSP from an Android phone.

 

A malformed inter-processor message could potentially be used by an attacker to execute and hide malicious code inside the DSP firmware. Since the DSP firmware has access to the audio data flow, an attack on the DSP could potentially be used to eavesdrop on the user. By chaining with vulnerabilities in Original equipment manufacturer (OEM) partner’s libraries, the MediaTek security issues we found could lead to local privilege escalation from an Android application.

 

The discovered vulnerabilities in the DSP firmware (CVE-2021-0661, CVE-2021-0662, CVE-2021-0663) have already been fixed and published in the October 2021 MediaTek Security Bulletin. The security issue in the MediaTek audio HAL (CVE-2021-0673) was fixed in October and will be published in the December 2021 MediaTek Security Bulletin.

Comments

Post a Comment

Popular posts from this blog

Empowering Business Connectivity and Innovation: Insights from HPE and Tarsus Leadership

-
In a recent conversation, leaders from HPE shared their strategic initiatives and technological advancements designed to empower businesses in the digital landscape. Here are some key insights from the discussion: Introducing the Panel • Mandy Duncan, South Africa Country Manager at HPE Aruba • Michael Langeveld, Head of Technology & Business Development, HPE South Africa • President Ntuli, Managing Director at HPE South Africa Connecting with the Channel Community HPE’s strategy emphasizes connecting with its channel community. Mandy Duncan highlighted the importance of leveraging ecosystems across various geographies to drive business outcomes. HPE aims to create long-term, sustainable partnerships beyond short-term revenue goals. Announcements and Innovations 1. Data Protection as a Service: HPE announced a partnership with distributor Tarsus to introduce data protection as a service, addressing cybersecurity concerns such as ransomware.  2. Hybrid Cloud ...
Read more

Vodacom Group enhances employee offerings to endorse inclusivity and promote well-being.

-
Image
Vodacom Group, recently ranked by the Top Employers Institute as the continent’s number one employer, has now enhanced some of its employee offerings as part of its commitment to creating an inclusive work environment across its markets. With an emphasis on Compassion, Acceptance, Respect and Empathy (C.A.R.E.), the company’s enhanced wellness initiatives include support for all stages of life, such as menopause, and a more encompassing family responsibility leave policy. “Our employees are the heart of Vodacom. We believe that their well-being contributes directly to our success as a company in fulfilling our purpose of connecting for a better future. By enhancing our employee value proposition through empathetic and inclusive policies and practices, we are creating a workplace culture where people feel empowered to thrive and make a positive impact on their career journey,” says Matimba Mbungela, Chief Human Resources Officer for Vodacom Group.  In a  recent research report ...
Read more

How can we grow young female entrepreneurship in South Africa?

-
Image
  How can we grow young female entrepreneurship in South Africa? By Linda McClure, Raizcorp COO South Africa, like many countries globally, grapples with the challenge of  youth unemployment . This is supported by statistics indicating a 45,5% unemployment rate among young individuals (aged 15-34 years), in contrast to the national average of 32,9% in the first quarter of 2024. It’s clear, though, that the struggle continues for many South African women – specifically in the area of small business and entrepreneurship. According to the World Bank, Africa boasts the highest growth rate of female-run businesses in the world. But down on the southernmost tip of the continent, women are still in the minority when it comes to entrepreneurship. While more than half of South Africa’s population is female, only 38% of SMEs are women owned and led. Despite these benefits and the potential of entrepreneurship to improve the socio-economic empowerment of  women in South Africa, ...
Read more