Kaspersky Discovers New Qualcomm Chip Vulnerability

On April 23, 2026, cybersecurity firm Kaspersky revealed a serious vulnerability affecting Qualcomm chips used in millions of smartphones worldwide. The discovery highlights growing concerns about hardware-level security risks, which are harder to detect and fix than typical software bugs.

The vulnerability could allow attackers to access sensitive data or interfere with how a device operates under specific conditions.

Details of the Vulnerability

The issue affects chips manufactured by Qualcomm, widely used in Android smartphones and connected devices.

According to Kaspersky, the flaw exists in the BootROM, a critical part of the chip that runs during device startup. Because BootROM is embedded into hardware, it cannot be easily patched through standard software updates.

The vulnerability is identified as CVE-2026-25262. Researchers say it could allow attackers to:

• Access files stored on the device

• Activate sensors like the camera or microphone

• Potentially gain deeper control over the system

Qualcomm has acknowledged the issue and is working with manufacturers to provide firmware-level mitigations, although rollout timelines depend on device makers.

Impacts on Smartphone Users

This vulnerability affects a wide range of devices released over recent years, as Qualcomm chips power a significant portion of the global smartphone market.

However, exploitation requires physical access to the device, which reduces the risk of remote attacks.

Still, real-world risks remain in situations such as:

• Lost or stolen phones

• Repairs by untrusted technicians

• Tampering during resale or supply chain handling

Compared to past hardware exploits like Spectre and Meltdown, which affected processors at a global scale, this vulnerability is more targeted but still serious because it operates at a deep system level.

Mitigation Steps

While fixes at the hardware level are complex, users can take practical steps to stay safe:

• Keep your device physically secure

• Avoid unauthorized repair services

• Install all available system and security updates

• Buy devices from trusted sources only

Manufacturers are expected to release patches or mitigations where possible, so staying updated is critical.

This discovery reflects a broader shift in cybersecurity. Threats are increasingly moving from apps and software into the hardware itself.

For users in Rwanda and across Africa, where smartphones are essential tools for communication, finance, and work, understanding these risks is becoming more important. While the immediate danger may be limited, awareness and good device habits remain the best defense.

Source: Kaspersky discovers vulnerability in Qualcomm Snapdragon chips that can lead to data loss & device compromise