spec_poc_arm

Spectre and Meltdown are a problem for Android but it's a smaller problem than on PCs. The vast majority of Android phones use processors that are in-order, and lack the out-of-order execution necessary to exploit. High-end Android phones with out-of-order processors (the minority) are only vulnerable to Spectre, but it's a little complicated [1]. Then there is only one ARM core (Cortex A75) that is vulnerable to Meltdown, but that was released after the vulnerability was published, so software could ship with mitigations in place. [1]: https://github.com/lgeek/spec_poc_arm

You are wrong. See [2] above. Variant 3a is meltdown. A proof of concept is here, https://github.com/lgeek/spec_poc_arm I've tried it personally. It is vulnerable.