Leaky location data bug fixed by O2 UK

• A security researcher found a way to pull all sorts of sensitive data from a call
• Among the data was geo-location information as well
• The bug was present since early 2023 but was now fixed

O2 UK has fixed a vulnerability in its VoLTE and Wi-Fi Calling implementations that allowed malicious actors to discover people’s locations and other identifiers.

Back in 2017, the company introduced the IP Multimedia Subsystem (IMS) service, called “4G Calling”. The service provides better audio quality, and more reliable phone calls. However, Daniel Williams, a security researcher, recently analyzed the feature and discovered that during the call, he was able to pull all sorts of information about his conversation partner, straight from the network.

That data includes IMSI, IMEI, and cell location.

60% off for Techradar readers

With Aura's parental control software, you can filter, block, and monitor websites ...