Home
News
You are here

Unpatched vulnerability in Samsung phones could let hackers read your messages

Updated: Jun 11, 2021, 9:16 AM

7comments

Unpatched vulnerability in Samsung phones could let hackers read your messages

Unpatched vulnerabilities could give hackers a substantial amount of control over your Samsung devices. Discovered by security company Oversecured's founder Sergey Toshin, they were first reported on by BleepingComputer.

One of these as-of-yet unfixed security flaws could help attackers trick you into giving access to your SMS messages.

If that sounds alarming, it gets worse: the two other vulnerabilities could be exploited by hackers to manipulate arbitrary files with elevated permissions. What makes these scarier is they can be exploited without any user interaction.

Samsung is aware of these security flaws and it may take about two months for a fix to arrive. For now, your best defense is to make sure your Samsung phone is on the latest firmware update.

14 out of 17 vulnerabilities found by Toshin have been fixed by Samsung

Toshin has found more than a dozen vulnerabilities in Samsung devices since the beginning of the year. Many have already been taken care of.

One of the bugs was in apps and components like Samsung’s Secure Folder app and the company's Knox security software that come pre-installed on its devices. Tohsin told TechCrunch that these could have given attackers access to sensitive user data.

The Samsung Galaxy S10+ is verified to have been affected. Although Samsung says that the flaw affected "selected" Galaxy devices, it appears to be downplaying the breadth of the incident.

There have been no known reported issues globally and users should be assured that their sensitive information was not at risk. We addressed the potential vulnerability by developing and issuing security patches via software update in April and May, 2021 as soon as we identified this issue.

Another flaw led to the deletion of all previously downloaded apps after device admin rights were granted to a newly installed app.

There was also a flaw in the Settings app that could have given read/write access to files with system user-level privileges. A vulnerability that was addressed in February could have given hackers access to your SMS/MMS messages and call details

Toshin also alerted Samsung to issues that may have helped bad actors retrieve SD card contents.

View Full Bio

Anam Hamid is a computer scientist turned tech journalist who has a keen interest in the tech world, with a particular focus on smartphones and tablets. She has previously written for Android Headlines and has also been a ghostwriter for several tech and car publications. Anam is not a tech hoarder and believes in using her gadgets for as long as possible. She is concerned about smartphone addiction and its impact on future generations, but she also appreciates the convenience that phones have brought into our lives. Anam is excited about technological advancements like folding screens and under-display sensors, and she often wonders about the future of technology. She values the overall experience of a device more than its individual specs and admires companies that deliver durable, high-quality products. In her free time, Anam enjoys reading, scrolling through Reddit and Instagram, and occasionally refreshing her programming skills through tutorials.