Thursday , June 5 2025
Samsung

Samsung mobile devices 25 flaws patched

Samsung has patched 25 vulnerabilities in its mobile devices. This is to strengthen them against code execution and privilege escalation attacks. Samsung is continuously working to improve the security of its smartphones and tablets, protecting the safety and privacy of its users.

Samsung recently disclosed vulnerabilities, known as Samsung Vulnerabilities and Exposures (SVE) items, in their latest security bulletin.

CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed

IBM has issued a security advisory for vulnerabilities in its QRadar Suite Software and Cloud Pak for Security platforms. These...
Read More
CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed

ALERT
Thousands of IP addresses compromised nationwide: CIRT warn

As Bangladesh prepares for the extended Eid-ul-Adha holidays, the BGD e-GOV Computer Incident Response Team (CIRT) has issued an urgent...
Read More
ALERT  Thousands of IP addresses compromised nationwide: CIRT warn

New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries

In March 2025, the Threatfabric mobile Threat Intelligence team identified Crocodilus, a new Android banking Trojan designed for device takeover....
Read More
New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries

Qualcomm Patches 3 Zero-Days Used in Targeted Android Attacks

Qualcomm has issued security patches for three zero-day vulnerabilities in the Adreno GPU driver, affecting many chipsets that are being...
Read More
Qualcomm Patches 3 Zero-Days Used in Targeted Android Attacks

Critical RCE Flaw Patched in Roundcube Webmail

Roundcube Webmail has fixed a critical security flaw that could enable remote code execution after authentication. Disclosed by security researcher...
Read More
Critical RCE Flaw Patched in Roundcube Webmail

Hacker claim Leak of Deloitte Source Code & GitHub Credentials

A hacker known as "303" claim to breach the company's systems and leaked sensitive internal data on a dark web...
Read More
Hacker claim Leak of Deloitte Source Code & GitHub Credentials

CISA Issued Guidance for SIEM and SOAR Implementation

CISA and ACSC issued new guidance this week on how to procure, implement, and maintain SIEM and SOAR platforms. SIEM...
Read More
CISA Issued Guidance for SIEM and SOAR Implementation

Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora

The Qualys Threat Research Unit (TRU) found two local information-disclosure vulnerabilities in Apport and systemd-coredump. Both issues are race-condition vulnerabilities....
Read More
Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora

Australia enacts mandatory ransomware payment reporting

New ransomware payment reporting rules take effect in Australia yesterday (May 30) for all organisations with an annual turnover of...
Read More
Australia enacts mandatory ransomware payment reporting

Why Govt Demands Foreign CCTV Firms to Submit Source Code?

Global makers of surveillance gear have clashed with Indian regulators in recent weeks over contentious new security rules that require...
Read More
Why Govt Demands Foreign CCTV Firms to Submit Source Code?

The problems affected different parts of Samsung devices, such as the operating system, firmware, and Samsung’s own software.

The vulnerabilities could let bad actors run harmful code on the devices or increase their privileges, getting unauthorized access to important information or system functions.

Samsung quickly responded to security threats, showing their commitment to protecting users from cyber threats.

SVE-2023-1778 (CVE-2024-20866):
There was a vulnerability in the Setupwizard that allowed unauthorized users to bypass device setup authentication. The patch for this vulnerability fixed the issue by removing unnecessary internet access during setup to prevent unauthorized access.

SVE-2023-2193 (CVE-2024-20855):
There was a problem with access control in the multitasking framework, which could have let unauthorized users access and control multitasking functions, allowing privilege escalation attacks. The update fixed this by imposing stricter access controls.

SVE-2023-2265 (CVE-2024-20856):
Samsung’s Secure Folder had a security flaw that allowed hackers to bypass authentication and access private data stored in it. The flaw has been fixed.

SVE-2024-0092 (CVE-2024-20861) and SVE-2024-0096 (CVE-2024-20862):

SveService had vulnerabilities: a use-after-free issue and an out-of-bounds write flaw. Both could allow arbitrary code execution. The patches fixed these memory corruption issues to prevent exploitation.

SVE-2024-0234 (CVE-2024-20865):
An authentication bypass in the bootloader allowed physical attackers to flash any images. The patch has added verification checks to prevent unauthorized flashing, improving the security of the device’s boot process.

SVE-2024-0357 (CVE-2024-20864):
A security issue in DarManagerService was fixed. This issue could have allowed unauthorized access, which could lead to further attacks.

The fixed vulnerabilities were included in a larger security update from Google that addressed issues with the Android operating system.

Check Also

ASUS routers

CVE-2023-39780
Botnet hacks thousands of ASUS routers

GreyNoise has discovered a campaign where attackers have gained unauthorized access to thousands of internet-exposed …

Leave a Reply

Your email address will not be published. Required fields are marked *