| Nokia G10 (TA-1334)
|
|
Security Grade
Calculator v1
|
Nokia G10
Release Date: 2021-04-08 • Status: End of sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Physical ports accessible; Verified Boot mitigates OS tampering. Qualitative assessment.
|
| Known vulnerabilities
|
Very common
|
🔗 Proof
|
Recurring Android-platform CVEs; firmware-specific applicability requires checking.
|
| Prior attacks
|
None
|
🔗 Proof
|
No confirmed model-specific attack in cited material; the 2026 FOTA disclosure concerns shared infrastructure.
|
| Updatability
|
Rare
|
🔗 Proof
|
Launch-era promise: two years of OS upgrades and three years of security updates. Those periods have elapsed as of 2026-10-24.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
🔗 Proof
|
Server certificates supported; universal mutual authentication is not guaranteed.
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
TLS/HTTPS supported; applications can permit cleartext traffic.
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Android 10+ launch devices require file-based encryption; removable media excluded.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
🔗 Proof
|
Owner account and credential management; no general administrator-defined roles established.
|
| Authentication
|
Secure
|
🔗 Proof
|
PIN/password and fingerprint supported; screen lock must be enabled.
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Android Gatekeeper throttles repeated failed credential checks.
|
| Event logging
|
Partial logging
|
🔗 Proof
|
Android system logs exist; complete persistent access auditing is not established.
|
| Passwords
|
Require change after setup
|
🔗 Proof
|
Closest category: user-defined screen lock; setup can be skipped. No mandatory complexity established.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Android 11 (launch version) (Companion App: None required)
|
| Hardware (CPU / GPU)
|
CPU: MediaTek Helio G25 • GPU:
|
| Memory & Storage
|
Memory: 3 GB / 4 GB RAM • Storage: 32 GB / 64 GB; microSD up to 512 GB
|
| Power, Battery & Charging
|
Battery: 5050 mAh, non-removable • Power: Rechargeable battery • Charging: 10 W wired charging via USB-C
|
| Display & Camera
|
Display: 6.5-inch HD+, 720 x 1600 pixels • Camera: Rear: 13 MP + 2 MP depth + 2 MP macro; front: 8 MP
|
| Sound & Connectivity
|
Sound: 3.5 mm headphone jack; FM radio; OZO Audio • Connectivity: 4G LTE; Wi-Fi 802.11 b/g/n; Bluetooth 5.0; USB-C 2.0 OTG; satellite positioning
|
| Physical (Dimensions & Mass)
|
Dimensions: 164.9 x 76 x 9.2 mm • Mass: 194 g
|
Assessment scope
Desk research as of 2026-10-24; no physical testing. Platform‑level controls are distinguished from model‑specific exploit evidence. Ratings are qualitative judgments using the form's limited categories, not measured incident rates. Operating system denotes the launch version. Regional memory configurations and update rollout can differ. The release_date field above uses the announcement date (2021‑04‑08); retail availability differed by market. Current support status is assessed as of October 2026.
Sources
- Manufacturer specifications
- Official model identification
- Launch announcement; date used above
- Current manufacturer security notices
Security Analysis
Nokia G10 (TA‑1334) ships with Android 11. This device is end‑of‑sale and receives almost no official security patches at this point.
Hardware tampering is rare. Verified boot is implemented, but physical ports are accessible to adversaries with physical device access. Multiple known Android‑platform vulnerabilities apply to this generation; as patches are discontinued these flaws remain unpatched.
On system‑level: network traffic uses modern TLS encryption, and Android file‑based full‑disk‑encryption is active. Authentication to cloud services is partial and depends on Google service frameworks.
For user authentication: screen lock supports PIN, pattern or password, with brute‑force lockout protection. Google account two‑factor authentication is available optionally. Password complexity rules are only optional and not enforced on‑device.
The highest‑priority risk stems from terminated security update support. Unpatched known vulnerabilities widen attack surface for malicious applications and local attackers. The device is not commonly observed within IoT botnet campaigns.
Mitigation
Avoid using this phone for highly‑sensitive accounts such as online banking or corporate login. Keep all installed applications updated. Do not connect it to confidential internal networks. Always set a strong screen‑lock credential and enable 2‑FA for the linked Google account. Turn off unused Bluetooth and Wi‑Fi functions when they are not required.
