Centre Issues Urgent Warning For Samsung Phones: Deets Inside

The Centre's nodal agency Indian government's Computer Emergency Response Team (CERT-In) has issued a high-risk warning for Samsung Mobile phone users.

The alert highlights numerous vulnerabilities impacting millions of Samsung Galaxy phones, (both older and newer models). It also underscores critical security concerns in Samsung Mobile Android versions 11, 12, 13, and 14, potentially enabling attackers to surreptitiously access and retrieve data from your device.

"Multiple vulnerabilities have been reported in Samsung products that could allow an attacker to bypass implemented security restrictions, access sensitive information, and execute arbitrary code on the targeted system," the CERT said in a notification.

The agency mentioned that the vulnerabilities are varied and affect different components of the Samsung ecosystem.

"These vulnerabilities exist due to improper access control flaw in KnoxCustomManagerService and SmartManagerCN component, integer overflow vulnerability in face preprocessing library; improper authorization verification vulnerability in AR Emoji, improper exception management vulnerability in Knox Guard, various out of bounds write vulnerabilities in bootloader, HDCP in HAL, libIfaaCa and libsavsac.so components, improper size check vulnerability in softsimd, improper input validation vulnerability in Smart Clip and implicit intent hijacking vulnerability in contacts," the statement added.

It also warns that the hackers may exploit the vulnerabilities to "access device SIM PIN, read sandbox data of AR Emoji, bypass Knox Guard lock via changing system time and gain access to sensitive information, execute arbitrary code and compromise the targeted system".

To reduce the risks linked to these vulnerabilities, the CERT recommended the users install the security updates released by Samsung in their official security advisory. Until the update is implemented, users should also be cautious when using the affected devices, especially when engaging with untrusted sources or unfamiliar applications.