NDSS 2025 – Vulnerability, Where Art Thou? Vulnerability Management In Android Smartphone Chipsets

This NDSS paper presents an empirical study of vulnerability management in Android smartphone chipsets, assembling a unified knowledge base of 3,676 chipset vulnerabilities across 437 chipset models and 6,866 smartphone models. The authors find that vulnerabilities are often inherited across multiple chipset generations, that the 90-day disclosure guideline is rarely followed, and that update availability for affected devices is frequently unclear or delayed; they provide recommendations for chipset manufacturers and a resource for future research.