QualPwn – Exploiting Qualcomm WLAN and Modem over the Air

Re:QualPwn – Exploiting Qualcomm WLAN and Modem over the Air by hannob on Wednesday August 07, 2019 @05:51PM (#20639531)

Yeah, you're wrong.

It's bad, but it's absolutely not unprecedented. The first time a similar issue was discovered was by Prozect Zero: https://googleprojectzero.blogspot.com/2017/04/over-air-expl... https://googleprojectzero.blogspot.com/2017/04/over-air-expl...

It has some pretty damning facts, including that most mobile devices have some form of IOMMU in theory, but they don't use it.

Later there was the Broadpwn vulnerability, which was very similar. I believe there were more of them later.

[ Parent | on HN ]

Re:QualPwn – Exploiting Qualcomm WLAN and Modem over the Air by d2mw on Wednesday August 07, 2019 @05:53PM (#20639545)

Google can claim many firsts, but hopping from a baseband to an application processor most certainly isn't one of them. I'm sure you can find presentations from e.g. CCC much older than 2017

[ Parent | on HN ]

Re:QualPwn – Exploiting Qualcomm WLAN and Modem over the Air by krageon on Thursday August 08, 2019 @04:39AM (#20642806)

I think I saw a presentation on this at the CCC in 2016, but it might have been another year.

[ Parent | on HN ]