Computer Emergency Response Team (CERT-In) has issue a high-risk warning for Samsung mobile phone users about critical security vulnerabilities in many Android operating systems running on Samsung phones.
If these vulnerabilities exploited can allow attackers to steal sensitive information, take control of your phone, and even install malware.
As per CERT-In, the vulnerabilities affect Samsung phones running Android 11, Android 12, Android 13, and Android 14.
Means it affects both old and new smartphones, including popular models like the Samsung Galaxy S23 Series, Samsung Galaxy Flip 5 and Samsung Galaxy Fold 5.
Post by @2yodoindiaView on Threads
CERT-In identified many vulnerabilities in Samsung phones and issues are as follow:
- Improper access control in Knox features.
- Integer overflow flaw in facial recognition software.
- Authorisation issues with the AR Emoji app.
- Incorrect handling of errors in Knox security software.
- Multiple memory corruption vulnerabilities in various system components.
- Incorrect data size verification in the softsimd library.
- Unvalidated user input in the Smart Clip app.
- Hijacking of certain app interactions in contacts.
These vulnerabilities could lead to severe consequences includes triggering heap overflow and stack-based buffer overflow, accessing device SIM PIN, broadcasting with elevated privilege, reading AR Emoji sandbox data, bypassing Knox Guard lock by changing system time, accessing arbitrary files, gaining sensitive information, executing arbitrary code and compromising the target system.
Then what could be Done?
- You can install the latest security patches from Samsung as soon as they become available.
- Also, always install security updates as soon as they are release.
- Updation help to keep your phone protected from these type of threats.
- And remember be alert while installing apps, clicking links, and visiting unknown websites.
