Wednesday , May 23 2018

Samsung devices exposed to security risks through Exynos vulnerability


Over the weekend, users over at XDA-developers have discovered a significant vulnerability in the kernel for a number of Samsung devices. Apparently, an application can exploit this vulnerability to gain full R/W access to all physical memory on devices that use the Exynos 4210 or 4412 chipsets, which power some of the most popular Android devices on the market, including the Galaxy S II, Galaxy S III, Galaxy Note and Galaxy Note 2. XDA members have created a patch for the vulnerability, but it causes the devices’ camera to become inoperable.

Samsung have been notified about the issue, but haven’t released any statement as yet.

Source: XDA-Developers.
Via: Talk Android.

James Finnigan  

Join the Ausdroid Conversation

5 Comments on "Samsung devices exposed to security risks through Exynos vulnerability"

newest oldest most voted
Valued Guest

I like how you left out the part with how the device needs to be rooted for this exploit to work.

The article I read about this earlier in, had it hidden away in a sea of txt that it required root and wasn’t obvious from the title either.

Valued Guest

From what I gathered from the linked XDA post, this exploit can be used to gain root access. Doesn’t mean the phone needs to be rooted for apps to exploit this vulnerability

Valued Guest

interesting, what I had read is that it requires root, maybe it was just the wording?

Ausdroid Reader

the simple fix which applies the correct permissions to the /dev/exynos-mem location (and renders the camera inoperable) requires root. to actually use the exploit you do not need root, which is why this is so dangerous – apps can potentially gain root through this exploit, then using other bugs (eg eMMC superbrick bug), can physically damage the device and hard brick it, beyond even JTAG repair.

Check Also

YouTube Music is starting to rollout today – but it doesn’t seem to have reached us here yet

The new YouTube Music service has started rolling out today – at least according to …