InfoSecBulletin Cybersecurity for mankind
Samsung has patched 25 vulnerabilities in its mobile devices. This is to strengthen them against code execution and privilege escalation attacks. Samsung is continuously working to improve the security of its smartphones and tablets, protecting the safety and privacy of its users.
Samsung recently disclosed vulnerabilities, known as Samsung Vulnerabilities and Exposures (SVE) items, in their latest security bulletin.
CVSS 10.0 Flaw
Critical flaw in Siemens OZW Web Servers Enable Unauthenticated RCE
Microsoft Patch Tuesday May 2025: 72 flaws, 5 Actively Exploited Zero-Day
OTP glitch disrupted NID services across the country
Google to pay Texas $1.4 billion for location tracking practices
YouTube geo-blocks at least 4 Bangladeshi TV channels in India
Microsoft Patches Four Critical Azure and Power Apps Vulns
Qilin Ransomware topped April 2025 with 45+ data leak disclosures
SonicWall Patches 3 Flaws in SMA 100 Devices
Top Ransomware Actively Attacking Financial Sector: 406 Incidents Disclosed
Critical (CVSS 10) Flaw in Cisco IOS XE WLCs Allows RRA
The problems affected different parts of Samsung devices, such as the operating system, firmware, and Samsung’s own software.
The vulnerabilities could let bad actors run harmful code on the devices or increase their privileges, getting unauthorized access to important information or system functions.
Samsung quickly responded to security threats, showing their commitment to protecting users from cyber threats.
SVE-2023-1778 (CVE-2024-20866):
There was a vulnerability in the Setupwizard that allowed unauthorized users to bypass device setup authentication. The patch for this vulnerability fixed the issue by removing unnecessary internet access during setup to prevent unauthorized access.
SVE-2023-2193 (CVE-2024-20855):
There was a problem with access control in the multitasking framework, which could have let unauthorized users access and control multitasking functions, allowing privilege escalation attacks. The update fixed this by imposing stricter access controls.
SVE-2023-2265 (CVE-2024-20856):
Samsung’s Secure Folder had a security flaw that allowed hackers to bypass authentication and access private data stored in it. The flaw has been fixed.
SVE-2024-0092 (CVE-2024-20861) and SVE-2024-0096 (CVE-2024-20862):
SveService had vulnerabilities: a use-after-free issue and an out-of-bounds write flaw. Both could allow arbitrary code execution. The patches fixed these memory corruption issues to prevent exploitation.
SVE-2024-0234 (CVE-2024-20865):
An authentication bypass in the bootloader allowed physical attackers to flash any images. The patch has added verification checks to prevent unauthorized flashing, improving the security of the device’s boot process.
SVE-2024-0357 (CVE-2024-20864):
A security issue in DarManagerService was fixed. This issue could have allowed unauthorized access, which could lead to further attacks.
The fixed vulnerabilities were included in a larger security update from Google that addressed issues with the Android operating system.
