This dangerous quick-charge vulnerability could burn your phone

(Image credit: Shutterstock / McLittle Stock)

We all love the quick-charging capability found in many modern smartphones, but a security firm has found that hundreds of millions of fast-charging-capable power adapters and power banks are vulnerable to hacker attacks and may damage hardware. 

According to Tencent Security Xuanwu Lab, the issue is considered to be among the most widely-reaching attacks on the physical world from the digital world.

All power adapters and power banks feature power management circuitry controlled by a power management IC (PMIC) with its own firmware. Every time a device is plugged to an adapter or a bank, it negotiates the necessary voltage and current parameters, which is when the charger’s firmware becomes vulnerable to attacks by malware that resides in the terminal device (or elsewhere).

Bad Power

By modifying firmware of a charging device, perpetrators can control their power output (and modern fast-charging adapters and banks can output up to ~100 W easily) and then burn or even explode smartphones, tablets, or laptops. Tencent Security calls this attack ‘Bad Power’. 

Tencent Security Xuanwu Lab recently tested 35 fast-charging power bricks and power banks from eight different brands and powered by nine different PMICs. All of the devices are available in stores. It found that 18 out of 35 fast-charging devices had safety issues and therefore could be attacked.

Modified firmware can be replaced by legitimate firmware rather easily, but it is virtually impossible to find out whether or not a particular fast-charging device is compromised.

Via CnTechPost

TOPICS

Anton Shilov is the News Editor at AnandTech, Inc. For more than four years, he has been writing for magazines and websites such as AnandTech, TechRadar, Tom's Guide, Kit Guru, EE Times, Tech & Learning, EE Times Asia, Design & Reuse.

Latest in Phone & Communications
GlocalMe KeyTracker
When I tested this global tracker, it trounced the Apple AirTag in so many ways
Privacy Hero II
I tested this secure router and the bundled year of VPN service feels mostly like a marketing exercise
ThinkPhone 25 by Motorola
I reviewed the ThinkPhone 25 by Motorola and while it's not as fast as its predecessor, it's the superior phone in so many ways
FRITZ!Box 7690 WiFi 7 Router
FRITZ!Box tries to embrace both business and home customers with its new 7690 router
Ulefone Armor Pad 4 Ultra Thermal
Other than screen reflection, I’m still looking for the downside to the Ulefone Armor Pad 4 Ultra Thermal tablet
Unihertz Tank Pad 8849
Carrying the Unihertz Tank Pad 8849 provided me with a full workout
Latest in News
A super close up image of the Google Gemini app in the Play Store
It's official: Google Assistant will be retired for phones this year, with Gemini taking over
Quordle on a smartphone held in a hand
Quordle hints and answers for Sunday, March 16 (game #1147)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Sunday, March 16 (game #378)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Sunday, March 16 (game #644)
Three iPhone 16 handsets on show
Apple could launch an iPhone 17 Ultra this year – but we've heard these rumors before
Super Mario Odyssey
ChatGPT is the ultimate gaming tool - here's 4 ways you can use AI to help with your next playthrough