Participants in the Mobile Pwn2Own 2017 competition successfully hacked into Apple's iPhone 7, Samsung's Galaxy S8, and Huawei's Mate 9 Pro during the first day of competition, according to event organizer Trend Micro's Zero Day Initiative (ZDI).
The two-day event offers prize money in excess of $500,000 and the $345,000 was earned during the first day, according to a SecurityWeek report. All vulnerabilities exploited during the competition will be disclosed to the vendors and they will have 90 days to issue a fix before ZDI issues a limited advisory with mitigation suggestions, according to ZDI.
A team from Tencent Keen Security Lab discovered four vulnerabilities in the Apple iPhone 7 running iOS 11.1, that could lead to a remote code execution through a WiFi bug and escalate privileges to persist through a reboot, ZDI says. The Tencent team earned $110,000 for the four bugs.
360 Security, meanwhile, found a bug in the Samsung Internet browser, in which privileges could be escalated in a Samsung app to also persist through a reboot, notes ZDI. 360 Security earned $70,000 with their demonstration.
Learn more about the Mobile Pwn2Own 2017 competition here.