Ziguang zhanrui mobile phone chips are exposed to have serious security vulnerabilities, and about 10% of Android phones in the world may be affected

6 month 6 Daily news , Recently, Israel network security company Check Point Research Release information called , Chinese chip manufacturer Ziguang zhanrui （UNISOC） Mobile processor baseband has serious vulnerability .

according to the understanding of ,Check Point Research When studying the mobile processor of purple light zhanrui , In a reverse engineering , Found this problem , And use purple light zhanrui T700 The processor Moto G20 The mobile phone is checked .

Check Point Research Express , Purple light zhanrui processor LTE The protocol stack is vulnerable , When an attacker uses the transmitting station to send malformed packets , The baseband of the mobile phone based on the Ziguang zhanrui processor will be reset , Affect the normal communication of users . Ziguang zhanrui occupies about of the global mobile processor market 11%, Mainly covering Asia and Africa Android mobile phone , If the loophole is exploited by a lawless person , It may cause a large-scale breakdown of local communication .

at present ,Check Point Research The vulnerability has been notified , It is expected to pass through Google 6 month Android Security update fixes , Users now just have to wait . This loophole （CVE-2022-20210） stay CVSS The vulnerability scoring system is classified as severity , Score up to 9.4 branch ; And this is not the most serious accident of Ziguang zhanrui , This year, 3 Monthly safety company Kyptowire Open CVSS score 9.8 A serious loophole （CVE-2022-27250）, An attacker can obtain the user's personal data , Even take over the phone .

edit ： Smart core - Woods