Google: Turn off Wi-Fi calling, VoLTE to protect your Android from Samsung hijack bugs
Google security analysts have warned Android device users that several zero-day vulnerabilities in some Samsung chipsets could allow an attacker to completely hijack and remote-control their handsets knowing just the phone number.
Between late 2022 and early this year, Google's Project Zero found and reported 18 of these bugs in Samsung's Exynos cellular modem firmware, according to Tim Willis, who heads the bug-hunting team. Four of the 18 zero-day flaws can allow internet-to-baseband remote code execution. The baseband, or modem, portion of a device typically has privileged low-level access to all the hardware, and so exploiting bugs within its code can give an intruder full control over the phone or device.
"Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require only that the attacker know the victim's phone number," Willis wrote in aSkilled attackers would be able to quickly create an operational exploit to compromise affected devices silently and remotely
"With limited additional research and development, we believe that skilled attackers would be able to quickly create an operational exploit to compromise affected devices silently and remotely," he added.. The other three are awaiting bug IDs. The other 14 issues aren't as severe and require"either a malicious mobile network operator or an attacker with local access to the device," according to Willis. These include
United Kingdom Latest News, United Kingdom Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Urgent Android user warning as 'threatening' new bug spreads worldwideUsers are being urged to check their phones as well as staying vigilant when downloading new applications as a dangerous bug hacks bank accounts across the globe.
Read more »
Inflation makes the cost of Samsung's Texas fab site ruinousSouth Korean titan budgeted $17 billion. Could now need over $25 billion to bring the facility online
Read more »
Calm down: Samsung’s “fake moon” tech has been around in 4K TVs for yearsThe best TVs show us pictures that are better than real. Should cameras do the same?
Read more »
Four COVID-19 booster doses most effective way to prevent critical Omicron BA.5A study published in JAMA Network Open explores the protective efficacy of previous exposure to omicron subvariants and booster vaccination against severe acute respiratory syndrome coronavirus 2 (SARS‑CoV‑2) omicron BA.5 infection.
Read more »
Google stops selling its biz-grade augmented reality specsIn case of apathy, break Glass
Read more »
Google taps Fastly to make cookie-free adtech FLEDGE flyOnline ad colossus hopes it can still make money when users want privacy
Read more »