Warning to samsung users

[vivek1989]

The government’s cybersecurity watchdog Computer Emergency Response Team (CERT-in) has a warning for users who are using Samsung smartphones. It issued a high-risk warning for users regarding multiple vulnerabilities, with Note CIVN-2023-0360, highlighting critical security issues in phones running Android versions 11, 12, 13 and 14.

Samsung’s flagship smartphone series, the Galaxy S23, has got the Android 14 update, hence, it is also included in this list.

The cybersecurity agency details that multiple vulnerabilities have been reported in Samsung products and they could allow an attacker to bypass implemented security restrictions, giving them access to sensitive information. They may also execute arbitrary code to compromise the targeted system.

The bugs may also allow hackers to successfully trigger heap overflow and stack-based buffer overflow, access device SIM PIN, send broadcast with elevated privilege, read sandbox data of AR Emoji, bypass Knox Guard lock via changing system time.

 Cert-In says that the vulnerabilities exist due to “improper access control flaw in KnoxCustomManagerService and SmartManagerCN component, integer overflow vulnerability in facepreprocessing library; improper authorization verification vulnerability in AR Emoji, improper exception management vulnerability in Knox Guard, various out of bounds write vulnerabilities in bootloader, HDCP in HAL, libIfaaca and libsavsac.so components, improper size check vulnerability in softsimd, improper input validation vulnerability in Smart Clip and implicit intent hijacking vulnerability in contacts.”

Users of Samsung smartphones are advised to install security updates as soon as possible. For future, users must patch their phones with security updates that are released by vendors periodically. In such cases, the companies are quick to issue patches to plug vulnerabilities.

Furthermore, if you haven’t patched your phone’s software, exercise caution when installing apps, clicking on links and visiting unknown websites.

[Anand_Avn]

Not so satisfactory

[cs_member10]

Dear Samsung Member,

Greetings from Samsung Customer Support!

Please rest assured that there is no security threat however we would recommend you have the latest software update to mitigate any security threat.

To update the latest software, please visit the given link:
https://www.samsung.com/in/support/mobile-devices/samsung-galaxy-smartphone-how-to-update-software/

Warm Regards,
Samsung Customer Support

[Pnkz09]

Which Samsung models??

[vivek1989]

All phones which r running at andriod 11,12,13,14

[UserAdik]

I have told Samsung there is a security threat

[vivek1989]

Theywill deny it bro

[UserAdik]

See

[vivek1989]

But later they will deny it.

[Samsung_o06W4jM]

Why no other country has been talking about this?