Hackers used Chrome and Snapdragon GPU flaws to hack Android phones
Security firm Sekoia identified a sophisticated attack targeting Android devices that chained two vulnerabilities: CVE-2026-3910 in Chrome and CVE-2025-27038 in Qualcomm's Adreno GPU driver. The attack required users only to visit a compromised website in outdated Chrome versions (139-145) and could steal browser cookies, login credentials, browsing history, and Wi-Fi passwords. The exploit worked by using the Chrome flaw to execute code within the browser, then exploiting the GPU driver vulnerability to escape the sandbox and gain deeper system access.
Key points
- Chained Chrome and Qualcomm Adreno GPU driver exploits targeted Android
- No user interaction (clicks, installations, permissions) required
- Affected phones running outdated Chrome; patched versions are safe
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. Android Authority did the reporting; read the original for the full story.
Read the full story at Android Authority
