Database Develop

Qualcomm Security bugs.

Serious security flaws that could give attackers complete access to a phone's data have been found in software used on tens of millions of Android devices.
The bugs were uncovered by Checkpoint researchers looking at software running on chipsets made by US firm Qualcomm.
Qualcomm processors are found in about 900 million Android phones, the company said.
However, there is no evidence of the vulnerabilities currently being used in attacks by cyberthieves.
"I'm pretty sure you will see these vulnerabilities being used in the next three to four months," said Michael Shaulov, head of mobility product management at Checkpoint.
"It's always a race as to who finds the bug first, whether it's the good guys or the bad."
Affected devices included:
BlackBerry Priv and Dtek50
Blackphone 1 and Blackphone 2
Google Nexus 5X, Nexus 6 and Nexus 6P
HTC One, HTC M9 and HTC 10
LG G4, LG G5, and LG V10
New Moto X by Motorola
OnePlus One, OnePlus 2 and OnePlus 3
US versions of the Samsung Galaxy S7 and Samsung S7 Edge
Sony Xperia Z Ultra
Mr Shaulov said six months of work to reverse engineer Qualcomm's code revealed the problems.
The flaws were found in software that handles graphics and in code that controls communication between different processes running inside a phone.
Exploiting the bugs would allow an attacker to gradually be able to take more control over a device and gain access to its data.
Android sculptureImage copyrightAP
The flaws could be used to make booby-trapped apps that steadily gain access to a phone's data
Checkpoint handed information about the bugs and proof of concept code to Qualcomm earlier this year.
In response, Qualcomm is believed to have created patches for the bugs and started to use the fixed versions in its factories.
It has also distributed the patches to phone makers and operators. However, it is not clear how many of those companies have issued updates to customers' phones.
Checkpoint has created a free app called QuadRooter Scanner that can be used to check if a phone is vulnerable to any of the bugs, by looking to see if the patches for them have been downloaded and installed.
In addition, Mr Shaulov said Android owners should only download apps from the official Google Play store to avoid falling victim to malicious programs.
"People should call whoever sold them their phone, their operator or the manufacturer, and beg them for the patches," said Mr Shaulov.
Qualcomm has yet to respond to a request for comment.

Scary stuff - too bad Google can't just roll us out a patch for it

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Here's the result of this scan on a unrooted op3 running stock 3.2.2. so clearly over to one plus.
Source of the article http://www.bbc.co.uk/news/technology-37005226
Franes04 said:
Serious security flaws that could give attackers complete access to a phone's data have been found in software used on tens of millions of Android devices.
The bugs were uncovered by Checkpoint researchers looking at software running on chipsets made by US firm Qualcomm.
Qualcomm processors are found in about 900 million Android phones, the company said..
Click to expand...
Click to collapse

tropicanapure said:
Here's the result of this scan on a unrooted op3 running stock 3.2.2. so clearly over to one plus.
Source of the article http://www.bbc.co.uk/news/technology-37005226
Click to expand...
Click to collapse
I would've linked the source but I didn't have enough posts to add links. Thank you for sharing.

No worries, mate, Google has seen the issue and will release a security patch for it (2015-08-05), check here!
We can only hope OnePlus releases the security patch as soon as possible, or you can just hop on the custom ROM bandwagon since they often have the patch merged day one.

device is now end of life :(

Just seen that the p20 will no longer be receiving monthly security updates, this means the device is officially now end of life.
I mean I haven't had a security update since December on o2uk but still. Sad to hear.

dlevick said:
Just seen that the p20 will no longer be receiving monthly security updates, this means the device is officially now end of life.
I mean I haven't had a security update since December on o2uk but still. Sad to hear.
Click to expand...
Click to collapse
Very true.
I've never had a security update less than about every 3 months anyway in the 18 months I've had the phone.
This will be the last Huawei phone for me, pity as overall I've loved it.
o2uk.

john306 said:
Very true.
I've never had a security update less than about every 3 months anyway in the 18 months I've had the phone.
This will be the last Huawei phone for me, pity as overall I've loved it.
o2uk.
Click to expand...
Click to collapse
This is the best phone iv had hands down, if you can get a decent deal on a p30 pro go for it, I upgraded to a Samsung S20 and the p20 pro still blows it out the water.

I already got march software update

Still on December update too on EE.
Heading back to Apple after this phone. May cost more to buy but at least you get updates after 2 years.

I'm at March security update, will soon get updated to EMUI 10.
The problem is with your carrier, I guess.

All UK device's seem to be the same. The 10.0 update will be the last world wide in terms of security updates. There will be patches but no security

I got the software and security update today.

They've updated many older phones this summer. This is most likely the last update for us. Unless, maybe they will try to give us a chance to go the Harmony os way at some point

Well, i'm a Huawei P20 Pro User that uses Ressurection Remix 8.7.0 with June 5th Security Patch Update, i left EMUI Months ago.
I Own the P20 Pro for almost Two Years, and well i saw the P20 Pro allready as a Dead Device since EMUI 9.1 and waited Months for EMUI 10.0 OTA that had Still Old Security Patch Updates when i had Pushed it to Update via. HiSuiteProxy because i not got any OTA over Months.
Then some View Months Back you can Unlock the Bootloader again, Downgraded to EMUI 9.0.0.195 and i Upgraded to LineageOS 16.0 and Got February 2021 Security Patches, compared to EMUI 10 it is a 3 Months Newer Security Patch.. and you can Add the Huawei Camera to it!
Then in the End because Months Passed i tried GSI Rom's and did go a Step further.
LineageOS 17.1 GSI and Ressurection Remix 8.7.0 GSI (AB or BvN) and both of them Work fine. Only Android 10 GSI's work, 11 breaks MTP.
The Only thing you loose if you use a Android 10 GSI is the Huawei Camera, but maybe an Alternative Camera? I think the Best is to Keep the Device Safe is ether Switch to GSI what Improves Device Speed alot or wait for HarmonyOS what i will not.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

If you guys don't know, Huawei P20 series is getting harmony os beta (better than nothing) in china, not sure if it will roll out globally. Not completely EOL though, but it might be a little bit hard to use in the global area.

190 update comes with April 2021 security patch, btw, for whom may be concerned. Phone works flawlessly, so no updates is quite fine for me

Question Did anyone get no update at all

A bit worried that all regions get an update or even more than one, and I am sitting here waiting...
S21 ultra exynos, Mena region
Am I alone?

I'm with you as well. UK, Three network and no update since AUAC just after I received the phone.

Nothing for me here in Australia yet

Same here on my US Unlocked version. I ended up just downloading the firmware manually and updated in odin without wiping.

Same, still on AUAC version, Jan security patch. There were two updates since I got the phone in the first few days of Feb.
I'm in New Zealand.
Samsung seems to do a very slow staged approach which I guess is so they catch issues before they affect too many people. But it is a bit frustrating when you really want to see the camera improvements...

Maddmatt said:
Same, still on AUAC version, Jan security patch. There were two updates since I got the phone in the first few days of Feb.
I'm in New Zealand.
Samsung seems to do a very slow staged approach which I guess is so they catch issues before they affect too many people. But it is a bit frustrating when you really want to see the camera improvements...
Click to expand...
Click to collapse
I didn't even get the updates you mentioned.

Guys, be aware of the fact that it takes Samsung a few weeks (up to month) to push out each update to every supported CSC. I literally just got my update (that released on 2/11/21) about five minutes ago, lol - and that's in North America.
So don't expect to get each update with this device as soon as it launches in one specific region. You just have to wait a little longer with Samsung devices (or, you can do it manually if your update is already publicly available online).
But with all of that said, this update is only around 350mb and is listed to only contain the February 1st security update and another camera performance increase update. So no worries, people! (and someone can make a pinned post with some of this general information if they want to. This is our community development forum, and so I want people to know what's going on out there).

Not so much that, but carrier versions need carrier approval.

T-mobile US I had to search for the update but just installed it.

likecookies said:
T-mobile US I had to search for the update but just installed it.
Click to expand...
Click to collapse
How? Same carrier and I've got nothing

Sadly there is NO CLEAR thread that explains in SIMPLE terms, for what exact model, what firmware version need to be installed in order to avoid data wipe.
Example XXUC = you can install only XCI, XCP, and XCR version safely without wipe.
Version IUYC = you can install only xxx, xxxx, and xxx version safely without wipe.
Every thread that i have read, looks confusing, does not state what can cause brick, what to keep an eye on, nothing!

henihazbay said:
A bit worried that all regions get an update or even more than one, and I am sitting here waiting...
S21 ultra exynos, Mena region
Am I alone?
Click to expand...
Click to collapse
I'm in the mena region too, and I'm on the Feb security patch on AUB6 software version...is this the latest?

In ireland use BTU, uk ire,
Since i got my one i have arleady 3 updates
Last on 12 feb.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

already 3 updates in Austria (Unlocked Version)

likecookies said:
T-mobile US I had to search for the update but just installed it.
Click to expand...
Click to collapse
What is your version showing?

got an update on day of purchase and a 2nd one today as i was checking while typing this so thanks for reminding me lol
Exynos variant
both say camera and performance and other improvements and stability and security and etc i want camera mostly then battery then performance honestly

camera won't get night & day difference from software updates it is what it is

anybody have (or have seen) camera improvements before and update the updates?

henihazbay said:
anybody have (or have seen) camera improvements before and update the updates?
Click to expand...
Click to collapse
Yes many stated that there are significant improvements.

henihazbay said:
anybody have (or have seen) camera improvements before and update the updates?
Click to expand...
Click to collapse
I notice smoother transition from the lenses while zooming.

Question CPH2173 firmware updates

So I've noticed something weird going on with the firmware of my FX3 Pro. Early April I received a firmware update with March security patch and some small fixes.
However when keeping an eye on the firmware info i noticed the date next to the firmware version is changing. So now it says 04/28/2021 while it started on 04/03/2021 but no updated firmware came by.
So why would Oppo change the date while no update came in?
I do think they should be ashamed for not providing monthly updates ( at least security patch ) as promised.
Now I don't care to much about the security patch but I'm eager to see the next firmware because latest turned out to be very bad when it comes to battery an performance.

One of the reasons Why I'm returning mine and exchanging for S21 ultra at least Samsung provide monthly updates and timely software fixes man this phone ain't even listed on the colour os firmware update page

I think there was a minor update which pushed out via the Play Strore in late April, which may be where the 28th date comes from (my phone shows the same date).
We're only 4 days into May so far, so give them a chance to get this months' update out.
(for comparison, OnePlus only "promise" 1 update every 2 months, and frequently fail to do so; and Samsung aren't anywhere near as good as they claim)

Yes, disappointing.
To clarify , what security patch is everyone on?
I have the 28/4/21 update , but that came with the March security patch.
My Samsungs and pixel are on May.
They promise monthly security updates on their website. They have failed at the first hurdle with the X3Pro. Not great going forward. Think failing that simple task is swaying me to sending it back.
( The average for my Samsungs the past 5 years is a monthly security patch on the 7th every single month and 2 other bug fix updates if they don't coincide )

My old FX2Pro is running May security patch ( my wife is using it now ) but our FX3Pro is placed behind in the line of updates.
However the security patch isn't my biggest concern, I can miss a month or two. BUT that previous update killed the performance and is eating my battery like sweet pie. On previous firmware the performance was flawless, with the latest it's bad. I'm eager for a new update hoping they will fix the issues and make my device perform again like it did when it came from the box

@patensas is your x3p still on the March security patch ?

Same march security pretty lame tbh
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

mgbosshogg said:
@patensas is your x3p still on the March security patch ?
Click to expand...
Click to collapse
Yes the same as above

I've got the April update on my phone, not sure why non of you have ?

@boomdox where are you / provider.?

Hello, I'm in the UK with a Vodafone branded firmware I believe, mainly due to the vf in the firmware name. It's not heavily branded mind. I've had updates twice now in 20 ish days of owning the phone, so not sure why people are complaining, so far, the updates are in time with what my note 20 ultra gets, and this is a much better phone than that.

Where are you seeing VF in the firmware name ? I might be being blind here.....

I received the last ( April Security Patches ) on 29/4/2021
Update numbers : A16
Malaysian Version .

Top peft

@boomdox thanks. .
Now , bizarrely mine is a EE phone. But has CPW in that version. Thought Car Phone Warehouse was defunkt ?

I'm not sure to be honest, to be honest though, the branding is just the Vodafone app, and that's it's, nothing daft like with Samsung phones

user154 said:
I second this, the only difference I think Im on day 19 and I don't own a note 20. My previous phone was a pixel 4, which obviously has a much better update schedule. However this phone blows it out the water in every other way, so I'm more than happy with it.
Click to expand...
Click to collapse
This is already way ahead in terms of battery than my note 20 Ultra with the same battery capacity. Plus it's 100% better felling in the hand. So more comfortable.
Did get a response from Oppo about one of my "bugs". Turns out the theme store is not supported in the UK. So that's why it's empty.

I'm also in the UK, on an unbranded phone bought directly from Oppo (I've got CPW in the firmware code as well)
Still on the March security update as shown in the first screenshot

stuclark said:
I'm also in the UK, on an unbranded phone bought directly from Oppo (I've got CPW in the firmware code as well)
Still on the March security update as shown in the first screenshot
Click to expand...
Click to collapse
Thanks mate. Bit of searching on the x2pro and looks like, confusingly, CPW is the name for unbranded fw. Seems like it's last for updates......

Completely off topic, anyone else received there free gifts for pre ordering the x3 pro, mine has turned up today, and the box they all turned up in is amazing looks like something the YouTubers get when they do an unboxing

Question Android 12 in North America / USA?

Hi everyone, the day is Jan. 17th at the time of this writing and my Zenfone 8 still has not received an update prompt for Android 12.
Before anyone tells me to just manually download 12, I want to know if this is just happening to me or if Asus is holding the update. In addition, I wouldn't want to download the general Android 12 update if a US-specific release is on the way.
Has anyone in the United States – or North America in general – received the OTA update yet?

Josipeen said:
Hi everyone, the day is Jan. 17th at the time of this writing and my Zenfone 8 still has not received an update prompt for Android 12.
Before anyone tells me to just manually download 12, I want to know if this is just happening to me or if Asus is holding the update. In addition, I wouldn't want to download the general Android 12 update if a US-specific release is on the way.
Has anyone in the United States – or North America in general – received the OTA update yet?
Click to expand...
Click to collapse
I am not in the US but afaik no OTA was released in Europe (and the rest of the world?) either. Yet - curiously - A12 is final since v73 and had already received an update to v81. Both these versions (and the older v68) work very well for me - but I did do a full reset after installing v68.
I generally dislike A12 (some poor design choices), but on the Z8 it works much better for me than A11. Battery life is definitely improved substantially.

I generally dislike A12 (some poor design choices), but on the Z8 it works much better for me than A11. Battery life is definitely improved substantially.
Click to expand...
Click to collapse
Great to know your battery has improved. By far my biggest gripe with my ZP8. As far as the design choices go, what are some of the things you dislike about A12? I was hoping the design would be an improvement over 11.

Josipeen said:
Great to know your battery has improved. By far my biggest gripe with my ZP8. As far as the design choices go, what are some of the things you dislike about A12? I was hoping the design would be an improvement over 11.
Click to expand...
Click to collapse
Bar icons and notifications design. Awful. Read a generic A12 review to get acquainted.

February 9th and STILL no OTA update from Asus! I heard they were slow with rolling out updates, but c'mon—I'm getting old here!

Feb 19th and I still didn't receive Android 12 ?!

vip.3omar said:
Feb 19th and I still didn't receive Android 12 ?!
Click to expand...
Click to collapse
Yup.

Josipeen said:
February 9th and STILL no OTA update from Asus! I heard they were slow with rolling out updates, but c'mon—I'm getting old here!
Click to expand...
Click to collapse
Slow?! They showered us with updates until A12.
And even with A12, they quickly put out of updates. The latest version is, in fact, an update (without a new security patch) of the first official version released in the final days of December.

They said on Zentalk that they stopped the A12 rollout temporarly to fix a bunch of bugs and crashes. They also said they might provide a last A11 patch as I think A12 soft bricked some devices. I am currently on A12 and I don't have any issues besides the usual glitch here and there.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}