Security News > 2020 > May > Samsung Patches Critical 0-Click Vulnerability in Smartphones
Samsung this week released its May 2020 set of security updates for Android smartphones, which includes a patch for a critical vulnerability impacting all of its devices since 2014.
In addition to the fixes in the Android Security Bulletin - May 2020, the phone maker's updates patch 19 vulnerabilities specific to Samsung smartphones.
Samsung says it addressed the bug with proper validation, but does not provide further details on the vulnerability.
The bug appears to affect all Samsung smartphones released since 2014, when the company added support for the custom Qmage image format that was designed by Korean third-party company Quramsoft.
The researcher exploited the bug on a Samsung smartphone running Android 10, with the default Samsung Messages app set as the SMS/MMS handler.
News URL
Related news
- Critical SailPoint IdentityIQ Vulnerability Exposes Files to Unauthorized Access (source)
- Veeam Issues Patch for Critical RCE Vulnerability in Service Provider Console (source)
- PoC exploit for critical WhatsUp Gold RCE vulnerability released (CVE-2024-8785) (source)
- Critical OpenWrt Vulnerability Exposes Devices to Malicious Firmware Injection (source)
- BeyondTrust Issues Urgent Patch for Critical Vulnerability in PRA and RS Products (source)
- BeyondTrust fixes critical vulnerability in remote access, support solutions (CVE-2024-12356) (source)
- Hackers Exploiting Critical Fortinet EMS Vulnerability to Deploy Remote Access Tools (source)
- Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now (source)