Hackers used Chrome and Snapdragon GPU flaws to hack Android phones
A nasty Chrome bug let hackers break into Android phones without a tap.
Security researchers at Sekoia have uncovered a mobile hacking campaign targeting Android and iPhone users through compromised websites. The attack primarily affected Android devices running outdated versions of Chrome, exploiting a Chrome bug (CVE-2026-3910) to execute malicious code within the browser. Following this, hackers leveraged a Qualcomm Adreno GPU driver flaw (CVE-2025-27038) to bypass Chrome's sandbox and gain deeper access to the infected Android phones.
The compromised devices were primarily those powered by Qualcomm's Snapdragon chips, as Adreno graphics are integrated into these devices. Once the attackers gained access, they could steal sensitive information such as browser cookies, saved logins, browsing history, and Wi-Fi passwords. Fortunately, both vulnerabilities had already been patched, meaning Android phones running up-to-date Chrome and security updates remained safe from this particular threat.
Written by urgent.news from Android Authority's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
