"While CyanogenMod is up to 4.4.4, Replicant is still stuck on Android 4.2. CM runs on just about everything, but Replicant is only supported by a handful of devices ranging from two to four years old. Plus, while Replicant aims to replace the proprietary drivers, it doesn't actually have a complete stack of drivers for any device." When the smartphone operating systems efforts of others, like Mozilla, failed to gain traction, Replicant continued. Replicant is sponsored and supported by the Free Software Foundation, which also hosts Replicant's source code. The following table lists the major releases of Replicant:  In March 2014, Replicant developers found and closed a vulnerability present in a wide range of Samsung Galaxy products that allowed the baseband processor to read and write the device's storage, sometimes with normal user privileges and sometimes as the root user depending on device model. Replicant's lead developer Paul Kocialkowski claimed it was a backdoor, but this was contested by Dan Rosenberg, a senior security researcher at Azimuth Security, who said there was "virtually no evidence for the ability to remotely execute this functionality". There is some evidence of similar exploits of Apple hardware that did not involve operating system software, and the "methods detailed take direct advantage of Apple’s “firmware” or permanent software programmed onto the device, usually by the manufacturer." The founder of Ubuntu previously expressed similar concerns. On January 3, 2013, the project released Replicant 4.0 SDK as a fully libre replacement to Android SDK. The Replicant SDK was released in response to Google updating the license for add-ons and binaries under a proprietary agreement. Replicant's SDK was discontinued on April 28, 2017 in favour of the free SDK packaged by Debian. Scope of the Replicant project has been gradually expanded to include support for new devices, starting with the Nexus One, Nexus S and Galaxy S. As of January 2014, the following devices are supported, with Wi-Fi and Bluetooth requiring proprietary firmware in order to work: The number of supported devices was doubled with version 6.0 in 2017.