BlackBerry is rolling out a patch towards the QuadRooter exploit to the Priv and DTEK50 beginning at present.
BlackBerry has constructed a patch towards the fourth and last vulnerability of the QuadRooter exploit.
As a refresher, QuadRooter was in a position to make use of vulnerabilities in Qualcomm’s firmware drivers to realize elevated permissions (learn: root) in your telephone or pill. Zero instances have been reported within the wild, and the consumer must disable manufacturing unit safety settings and manually set up an app utilizing the QuadRooter code. As well as, all telephones operating Android four.2 or larger and use Google Play have built-in protections that scan apps and warn the consumer earlier than the set up. BlackBerry units that run Android — the Priv and the DTEK50 — even have a safe boot course of that verifies the system hasn’t been tampered with.
In different phrases, this wasn’t going to go far within the first place.
However, it is nice to see BlackBerry’s lively give attention to safety. Three of the 4 vulnerabilities have been patched by Qualcomm and included within the August Android Safety Patch, however the fourth was slated to return with the September patch.
Some important Android vulnerabilities – for instance, one that may be simply and remotely exploited with a publicly disclosed technique to execute ‘root’ privileged malware – merely cannot look forward to a month-to-month replace cycle. — BlackBerry Chief Safety Officer, David Kleidermacher
Kleidermacher is right. BlackBerry stakes its status on safety, and patching a brand new firmware bug ought to take prime precedence. Properly accomplished, BlackBerry.
The patch has been launched and is accessible in the present day for units bought from ShopBlackBerry.com. Companions are anticipated to start the rollout this week.