The Indian government’s Computer Emergency Response Team (CERT-In) has issued a high-risk warning for Samsung mobile phone users, highlighting critical security vulnerabilities in various Android operating systems running on Samsung phones. These vulnerabilities, if exploited, could allow attackers to steal sensitive information, take control of your phone, and even install malware.

Samsung Galaxy S25 camera sensor leak

According to CERT, the vulnerabilities affect Samsung phones running Android 11, 12, 13, and 14. This means it affects both old and new smartphones, including popular models like the Galaxy S23 series, Galaxy Flip 5, and Galaxy Fold 5.

CERT-In has identified several vulnerabilities in Samsung products, arising from issues such as:

Improper access control in Knox features.
Integer overflow flaw in facial recognition software.
Authorisation issues with the AR Emoji app.
Incorrect handling of errors in Knox security software.
Multiple memory corruption vulnerabilities in various system components.
Incorrect data size verification in the softsimd library.
Unvalidated user input in the Smart Clip app.
Hijacking of certain app interactions in contacts.

The exploitation of these vulnerabilities could lead to severe consequences. This includes triggering heap overflow and stack-based buffer overflow, accessing device SIM PIN, broadcasting with elevated privilege, reading AR Emoji sandbox data, bypassing Knox Guard lock by changing system time, accessing arbitrary files, gaining sensitive information, executing arbitrary code, and compromising the targeted system, the agency says.

So what can you do? Users can install the latest security patches from Samsung as soon as they become available. Also, make it a habit to install security updates as soon as they are released. This helps keep your phone protected from the latest threats.

Meanwhile, be careful when installing apps, clicking links, and visiting unknown websites. These are common ways for attackers to exploit vulnerabilities.

Related:

(via)