Samsung phones on high-risk security alert; Indian government asks users to update their handsets

Samsung phones are on a high-risk security alert! The Indian government has issued a critical alert to users of Samsung smartphones across the country, urging them to swiftly update their handsets in response to identified security vulnerabilities. The advisory, issued by the Computer Emergency Response Team of India (CERT-In) highlights a threat to Samsung devices operating on Android versions 11, 12, 13, and 14. These vulnerabilities, if exploited, could potentially allow unauthorised access to sensitive data on these devices.

CERT-In has categorised the risk as high, emphasising that attackers may exploit these vulnerabilities to circumvent security measures, access confidential information, and execute unauthorised code on targeted systems. The identified vulnerabilities pose a potential threat to various components within the Samsung ecosystem.

Detailed Analysis and Potential Consequences

The detailed analysis by the government's cybersecurity team reveals a range of potential issues, including improper access control in Knox features, integer overflow flaws in facial recognition software, authorization concerns with the AR Emoji app, mishandling of errors in Knox security software, and multiple memory corruption vulnerabilities in different system components. Additionally, the vulnerabilities extend to issues like incorrect data size verification in the softsimd library, unvalidated user input in the Smart Clip app, and the hijacking of specific app interactions in contacts.

If an attacker successfully exploits these vulnerabilities, the consequences could be severe. The official statement outlines potential outcomes, including triggering heap overflow and stack-based buffer overflow, accessing the device SIM PIN, sending broadcasts with elevated privilege, reading sandbox data of AR Emoji, bypassing Knox Guard lock by altering system time, accessing arbitrary files, gaining entry to sensitive information, executing arbitrary code, and compromising the targeted system.

Importantly, the affected Samsung Mobile Android versions include 11, 12, 13, and 14. Devices at risk encompass popular models such as the Samsung Galaxy S23 series, Samsung Galaxy Z Flip 5, Samsung Galaxy Z Fold 5, and more.

To mitigate the risks associated with these vulnerabilities, users are strongly advised to take the following measures:

1. Apply security updates promptly.

2. Keep apps up to date.

3. Exercise caution when installing apps.

4. Be vigilant when clicking on links.

This urgent advisory aims to safeguard Samsung users from potential security threats and emphasises the importance of proactive measures to secure their devices.