The bugs were uncovered by Checkpoint researchers looking at software running on chipsets made by US-based company Qualcomm.
Qualcomm processors are found in about 900 million Android phones, the company said.
However, there is no evidence of the vulnerabilities currently being used in attacks by cyberthieves.
Affected devices included:
According to the company, it took six months of work to reverse engineer Qualcomm’s code to reveal the problems.
The flaws were found in software that handles graphics and in code that controls communication between different processes running inside a phone.
Exploiting the bugs would allow an attacker to gradually be able to take more control over a device and gain access to its data.
Checkpoint handed information about the bugs and proof of concept code to Qualcomm earlier this year.
In response, Qualcomm is believed to have created patches for the bugs and started to use the fixed versions in its factories.
It has also distributed the patches to phone makers and operators. However, it is not clear how many of those companies have issued updates to customers’ phones.
Checkpoint has created a free app called QuadRooter Scanner that can be used to check if a phone is vulnerable to any of the bugs, by looking to see if the patches for them have been downloaded and installed.
Android owners should only download apps from the official Google Play store to avoid falling victim to malicious programs.
President Joe Biden has urged pro-Palestinian protesters on university campuses to uphold the rule of…
Blue Ivy Carter has joined the voice cast of The Lion King prequel Mufasa: The…
At least five people, including a four-month-old baby, have been killed after dozens of tornadoes…
Harvey Weinstein has been hospitalized just days after his 2020 rape conviction in New York…
Hamas has published a video showing the first proof of life of US and Israeli…
Prosecutors and Donald Trump’s attorneys delivered opening statements and the first witness was called on…