CERT-In Issues Urgent Alert for Samsung Smartphone Users: Don’t Miss Out!

The Computer Emergency Response Team of India (CERT-In) has issued a crucial alert for Samsung smartphone users across the nation. The advisory emphasizes the urgent need to update devices running on Android versions 11, 12, 13, and 14.

The identified security vulnerabilities pose a high risk, potentially leading to unauthorized access to sensitive data stored on affected Samsung devices.

Risk Classification and Potential Threats

CERT-In classifies the risk as high, highlighting the possibility of attackers leveraging these vulnerabilities to bypass security protocols. The recognized vulnerabilities present potential threats to various components within the Samsung ecosystem. These include inadequate access control in Knox features, integer overflow vulnerabilities in facial recognition software, and authorization issues with the AR Emoji app.

The Comprehensive Examination

A comprehensive examination conducted by the government's cybersecurity team has unveiled several potential issues. These encompass incorrect data size verification in the softsimd library, unvalidated user input in the Smart Clip app, and the hijacking of specific app interactions in contacts. If successfully exploited, attackers could trigger heap overflow, stack-based buffer overflow, obtain the device SIM PIN, access arbitrary files, and compromise the targeted system.

Affected Samsung Devices

The impacted Samsung Mobile Android versions include 11, 12, 13, and 14. Vulnerable devices include widely-used models like the Samsung Galaxy S23 series, Samsung Galaxy Z Flip 5, Samsung Galaxy Z Fold 5, and others.

Safeguarding Measures Recommended by CERT-In

To address the risks linked to these vulnerabilities, CERT-In recommends users to implement the following precautions:

• Timely apply all security updates to ensure your device's protection.
• Regularly update your apps to keep them current and secure.
• Exercise caution when installing new applications on your device.
• Remain vigilant and exercise caution when clicking on any links.

Additional Security Alerts

This week, CERT-In has also flagged multiple vulnerabilities in browsers such as Google Chrome for desktop and Microsoft Edge (Chromium-based). Users are advised to stay informed about security updates and take necessary precautions to protect their digital assets.

Via