Samsung manufactures its in-house chipset, Exynos, to power its budgetable and mid-range Galaxy smartphones. A few Samsung phones with Exynos chips have a sincere security flaw that could easily allow hackers to gain control and install malware.
Samsung Galaxy smartphones powered by a few particular Exynos SoCs are going through a security flaw. A report revealed that cybersecurity researchers from Google’s Threat Analysis Group (TAG) have found a security flaw inside some of the Exynos chips.
Samsung Exynos Chip Users Warned of Major Security Flaw
The advisory regarding the vulnerability mentions that it is being tracked as CVE-2024-44068, which has a severity rating of 8.1 and translates to “high severity.”
According to the report, Samsung Exynos mobile processors versions 9820, 9825, 980, 990, 850 that animate the Galaxy S10 series, Galaxy Note 10 and 10+, Galaxy S20, the Samsung Galaxy A51 5G and Galaxy A71 5G smartphones, in addition to the Exynos W920 that is incorporated in some Samsung Galaxy Watch smartwatches, are affected.
To clarify the security flaw TAG, it’s stated, “This 0-day exploit is part of an EoP chain. The actor can execute arbitrary code in a privileged camera-server process. The exploit also renamed the process’[email protected],’ probably for anti-forensic purposes.”
However, Google’s research team revealed that the “0-day” exploit is actively being used by hackers to gain unauthorized access to devices and potentially install malicious software. The acuteness of the issue is heightened by the probability of merging this vulnerability with other attacks.
Samsung’s impact in-house Exynos chipsets are powering the Galaxy S10 series, the Galaxy Note 10 and Galaxy Note 10+, the Galaxy S20 series, Samsung Galaxy A51 5G, and Galaxy A71 5G devices. The Exynos W920 is powering a few Samsung Galaxy watches.
To avoid serious security flaws, Google’s TAG security team already alerted Samsung regarding the vulnerability earlier this year. Samsung actively looked into it and actively addressed the vulnerability on October 7 with a patch.
