Indian govt issues high risk warning against Samsung phone users
By MYBRANDBOOK
The Computer Emergency Response Team of India (CERT-In), has issued a high-risk warning for Samsung mobile phone users regarding multiple vulnerabilities. The warning highlights critical security issues affecting Samsung Mobile Android versions 11, 12, 13, and 14. These vulnerabilities are rated HIGH due to their potential impact and ease of exploitation.
CERT-In researchers have reportedly identified multiple vulnerabilities in Samsung products that pose significant threats, and can potentially allow attackers to bypass security restrictions, access sensitive information, and execute arbitrary code on targeted systems. These vulnerabilities are diverse and impact various components of the Samsung ecosystem, as detailed in the CERT-In advisory.
According to CERT-In, the identified vulnerabilities in Samsung products stem from issues like -
● Improper access control in Knox features.
● Integer overflow flaw in facial recognition software.
● Authorisation issues with the AR Emoji app.
● Incorrect handling of errors in Knox security software.
● Multiple memory corruption vulnerabilities in various system components.
● Incorrect data size verification in the softsimd library.
● Unvalidated user input in the Smart Clip app.
● Hijacking of certain app interactions in contacts.
The effective exploitation of these vulnerabilities could result in serious repercussions. This may include scenarios where an attacker could initiate a heap overflow and stack-based buffer overflow, gain access to the device SIM PIN, send broadcasts with elevated privilege, read sandbox data of AR Emoji, bypass Knox Guard lock by altering system time, access arbitrary files, obtain sensitive information, execute arbitrary code, and compromise the targeted system, as indicated in the security note.
Nazara and ONDC set to transform in-game monetization with ‘
Nazara Technologies has teamed up with the Open Network for Digital Comme...
Jio Platforms and NICSI to offer cloud services to government
In a collaborative initiative, the National Informatics Centre Services In...
BSNL awards ₹5,000 Cr Project to RVNL-Led Consortium
A syndicate led by Rail Vikas Nigam Limited (abbreviated as RVNL), along wi...
Pinterest tracks users without consent, alleges complaint
A recent complaint alleges that Pinterest, the popular image-sharing platf...
HP INDIA SALES PVT. LTD.
TEJAS NETWORKS INDIA PVT. LTD.
VERSA NETWORKS INDIA PVT. LTD.
MATRIX COMSEC PVT. LTD.
Icons Of India : GAUTAM ADANI CHAIRMAN ADANI GROUP
Gautam Adani is the Founder and Chairman of the Adani Group, which ran...
Icons Of India : Daisy Chittilapilly
Daisy Chittilapilly is the President of Cisco’s India and SAARC regi...
Icons Of India : AMIT CHADHA
Amit Chadha serves as the CEO and Managing Director of L&T Technology ...
TCIL - Telecommunications Consultants India Limited
TCIL is a government-owned engineering and consultancy company...
BEL - Bharat Electronics Limited
BEL is an Indian Government-owned aerospace and defence electronics co...
NSE - National Stock Exchange
NSE is the leading stock exchange in India....
Indian Tech Talent Excelling The Tech World - George Kurian, CEO, Netapp
George Kurian, the CEO of global data storage and management services ...
Indian Tech Talent Excelling The Tech World - Sanjay Mehrotra, CEO- Micron Technology
Sanjay Mehrotra, the President and CEO of Micron Technology, is at the...
Indian Tech Talent Excelling The Tech World - ARVIND KRISHNA, CEO – IBM
Arvind Krishna, an Indian-American business executive, serves as the C...