Google announced this week that it released an Android update to patch shedloads of vulnerabilities, but the advisory mentioned an information disclosure vulnerability in the Qualcomm tethering controller (CVE-2016-2060) that allows a malicious application to access user information.

FireEye said that this vulnerablity is “high severity,” but Google noted that it does not affect Nexus devices. The patch for the issue is not in the Android Open Source Project (AOSP) repository but might make it in the  latest driver updates for affected devices.

The security outfit said that researchers informed Qualcomm about the vulnerability in January and the vendor developed a fix by early March, when it started reaching out to OEMs to let them know about the issue. Now it’s up to the device manufacturers to push out the patch to customers. So probably a long time then.

The flaw exists in an open source software package maintained by Qualcomm and is related to the Android network daemon (netd).

“The vulnerability was introduced when Qualcomm provided new APIs as part of the ‘network_manager’ system service, and subsequently the ‘netd’ daemon, that allow additional tethering capabilities, possibly among other things,” FireEye said.

The flaw has been confirmed to affect devices running Android 5.0 Lollipop and earlier, which currently account for roughly three-quarters of Android devices. Researchers noted that the affected Qualcomm software package is used in a variety of projects, including the popular CyanogenMod, and the vulnerable APIs appear to have been around since at least 2011.

The vulnerability can be exploited to escalate privileges to the built-in “radio” user, which has permissions that are normally not available to a third-party app. The most efficient way to exploit CVE-2016-2060 is via a malicious application that is granted the “ACCESS_NETWORK_STATE” permission.

Courtesy-Fud

The chip is designed for in-car navigation and infotainment systems running QNX, Linux, and Android.  It has wireless capabilities and can connected to your phone.  The LTE version will link to the Internet.

They can manage multiple displays to run the screen in your dashboard  and an infotainment screen in the back seat. It also offers support for high-resolution 4K displays for when some company inevitably decides to cram a high-res, high-density screen into one of its cars.

The 820A chips are close cousins ofthe the Snapdragon 820 SoCs that will start shipping in phones later this year and use Qualcomm’s custom-made 64-bit Kryo CPU cores, an Adreno 530 GPU, a  Hexagon 680 DSP all cooked up with a 14nm manufacturing process. They will also use the Snapdragon X12 LTE which can manage 600Mbps down and  150Mbps up when the wind is behind it and it is going downhill. There are all the usual 802.11ac Wi-Fi, Bluetooth, and other features.

Qualcomm said that it used a “modular approach” in designing the chip, which  means that the cars infotainment system can be upgraded with hardware and software updates, thereby enabling vehicles to be easily upgraded with the latest technology.

Car makers could theoretically swap out the chip or the entire package without needing to worry about software changes. Qualcomm specifically mentions upgrading LTE connectivity over the lifetime of the car to keep up with the capabilities of cellular networks.

Qualcomm says the 820A family will begin sampling in Q1 of 2016.

Courtesy-Fud

The next generation SoC from Qualcomm, let’s call it Snapdragon 8×0, will use ARM Cortex cores. Our industry sources are confident that company’s leadership has put a great deal of pressure on Qualcomm QTI to reduce the cost of R&D and custom CPU core costs an arm and a leg. Using Cortex Cores is cheaper than developing a custom ARM based CPU such as Kyro.

Creating a custom ARM based CPU core is intensive too and Qualcom still has to build a Modem, GPU, DSP, camera ISP, Video processing unit as well connectivity inside of the SoC to provide the differentiating factor to the competition. It just appears that the Core itself probably does not need looking at.

But the move will hardly help Qualcomm compete in hostile and aggressive mobile SoC manufacturers’ competition.

Apple and Samsung have their own CPU cores. Huawei uses Cortex architecture but has its own SoCs for the 100 million phones it sold this year. These are businesses that are either very hard or impossible for Qualcomm QTI SoCs to get. Every Samsung SoC manufactured and sold in Samsung phones is one less for Qualcomm.

MediaTek might be the winner in this case, as MediaTek makes rather unique processors that are designed to compete well against those who use close-to-reference Cortex ARM solutions. MediaTek is the only deca core in three cluster architecture but we still have to see it in action before we pronounce anyone winner or loser.

Qualcomm will have to focus on its strengths of its late 2016 successor to Snapdragon 810. The strengths of Qualcomm lay in superior modem performance and a great Adreno GPU. However they will lose an advantage of a custom core that might bring a bigger difference from the competition.

This is certainly not something we expected but it is happening.

Source-http://www.thegurureview.net/computing-category/is-qualcomm-dropping-kryo.html