Serious security flaws that could give attackers complete access to a phone’s data have been found in software used on tens of millions of Android devices. The bugs were uncovered at software running on chipsets made by US firm Qualcomm. Qualcomm processors are found in about 900 million Android phones, the company said.

Affected devices included, BlackBerry Priv, Blackphone 1 and Blackphone 2, Google Nexus 5X, Nexus 6 and Nexus 6P, HTC One, HTC M9 and HTC 10, LG G4, LG G5, and LG V10, New Moto X by Motorola along with One Plus mobiles, Sony Xperia and few more.

The flaws were found in software which handles graphics and in code that controls communication between different processes running inside a phone. Exploiting the bugs would allow an attacker to gradually be able to take more control over a device and gain access to its data.

Checkpoint handed information about the bugs and proof of concept code to Qualcomm earlier this year. In response, Qualcomm is believed to have created patches for the bugs and started to use the fixed versions in its factories.