tr

Updated:05:08 PM EDT May 29


this is ggmania.com subsite All Samsung Galaxy Phones Since 2014 Are Vulnerable - TechAmok

All Samsung Galaxy Phones Since 2014 Are Vulnerable - [security]
04:12 PM EDT - May,10 2020 - post a comment

If you own a Samsung Galaxy handset that was released in the past six years, do yourself a solid and check for an over-the-air (OTA) software update. Left unpatched, every Galaxy phone dating back to 2014 is vulnerable to a so-called 'zero-click' bug related to Android's handling of the custom Qmage image format (.QMG). That means millions of Galaxy phones are affected by this, until patched with the latest security update from Samsung. Not to be overlooked, the vulnerability carries the highest 'Critical' rating, and could allow an attacker to run malicious code remotely. Part of the reason for the high severity rating is because vulnerable handsets can be exploited without any user interaction. Google's Project Zero team discovered the flaw and reported the issue to Samsung in January. It has been addressed in Samsung's May 2020 Security Bulletin, along with a bunch of other security issues. Mateusz Jurczyk, one of the security researchers with Project Zero, uploaded a proof-of-concept video to demonstrate the vulnerability

Left unpatched, and attacker could ping a target handset with multiple multimedia SMS (MMS) messages in repeated attempts to guess where the Skia library resides in a phone's built-in memory. Once that is determined, the attacker could send malicious code under the guise (to the phone) of a Qmage image. Jurczyk told ZDNet this typically entails between 50 and 300 MMS messages to discern the location and ultimately sidestep Android's ASLR (Address Space Layout Randomization) protection. And even though a high number of messages would usually trigger suspicion, they can be stealthily sent and processed by the target phone without any notifications. Fortunately, Samsung was relatively quick to roll out a fix after being alerted to the flaw. So again, if you own a Galaxy handset-either a recent one or dating all the way back to something like the Galaxy Note 4 or Galaxy Note Edge (both released in late 2014) - then head over into your device's settings and manually check for an update.

Short overview of recent news articles

Cricket Launches Two New Nokia Phones (May,29 2020 )

This Ridiculous 5G Signal Blocking USB Stick Is A Complete Scam (May,29 2020 )

Samsung Money is Samsung's Answer to Apple Card (May,28 2020 )

Get Borderlands: The Handsome Collection for Free (May,28 2020 )

AMD Releases Radeon Software Adrenalin 20.5.1 Drivers (May,28 2020 )

Windows 10 May 2020 Update available for download (May,27 2020 )

NVIDIA GeForce 446.14 WHQL driver (May,27 2020 )

NASA and SpaceX Launch Astronauts to Space! (May,27 2020 )

AMD Ryzen 9 3900XT and Ryzen 7 3800XT Benchmarks (May,27 2020 )

YouTuber Attempts To Blow Bubbles With Molten Lava (May,26 2020 )

i9 10900X vs Ryzen 9 3900X Test in 9 Games (May,26 2020 )

Arm Intros Its High-End Processor Designs for 2021 (May,26 2020 )

Fortnite now runs at 90Hz on the OnePlus 8 series (May,26 2020 )

How the Teenage Players of Habbo Hotel Turned to Financial Crime (May,24 2020 )

8 things NOT to do in Germany (May,24 2020 )

Google Launches Suite of New Accessibility Features (May,24 2020 )

Intel Rocket Lake CPU Appears with 6 Cores and 12 Threads (May,23 2020 )

Tenet - new trailer (May,23 2020 )

Xiaomi Mi Band 5 rumored to gain SpO2 sensor (May,23 2020 )

Intel Core i9-10900K hits 7.7GHz on liquid helium (May,21 2020 )

Apple and Google Launch COVID-19 Exposure Notification (May,21 2020 )

T-Mobile Offers Free Service to First Responders (May,21 2020 )

Intel Core i9-10900K Review (May,21 2020 )

Space Force - Official Trailer (May,20 2020 )

THE HOOD INTERNET presents 1986 (May,18 2020 )

The Best Upcoming ACTION Movies 2020 (Trailers) (May,18 2020 )

Da 5 Bloods - Official Trailer (May,18 2020 )

Driver Performs Strange and Dangerous U Turn (May,18 2020 )

Watch This 1,500-HP Honda Civic Go From 0 To 60 MPH In A Crazy 1.1 (May,18 2020 )

Xfinity Mobile Launches 5G Service (May,18 2020 )

Netflix is restoring streaming quality in Europe (May,16 2020 )

TCL-Branded Phones Launch in US on May 19 (May,14 2020 )

GTA V is free on the Epic Games Store (May,14 2020 )

Unreal Engine 5 Revealed! (PS5) (May,13 2020 )

Microwaving a Highlighter Has a Surprising Reaction! (May,12 2020 )

Intel i9-10900K CPU runs very hot & consumes 235W (May,12 2020 )

WhatsApp will soon allow 50 person video calls (May,11 2020 )

All Samsung Galaxy Phones Since 2014 Are Vulnerable (May,10 2020 )

The process of making friends with a carpenter bee (May,09 2020 )

Windows 10 20H1 Update releases on May 26th (May,09 2020 )

Ashes of the Singularity: Escalation for Free (May,08 2020 )

AMD Ryzen 3 3300X and Ryzen 3 3100 Reviews (May,08 2020 )

iOS 13.5 Can Automatically Share Medical Info with 911 Operators (May,08 2020 )

Verizon Launches LG Q70 (May,08 2020 )

BECKY Trailer (2020) Kevin James as Neo-Nazi Thriller Movie (May,07 2020 )

Shit the simpsons really did predict 2020 (May,07 2020 )

Zoom Threesome (May,07 2020 )

Our Only Hope Against The Murder Hornet Is The Praying Mantis (May,07 2020 )

Call of Duty: Warzone - JaredFPS Highlights at 144+ FPS (May,05 2020 )

Cyberpunk 2077 news set for June 11 (May,05 2020 )

>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs