Galaxy S23 and Xiaomi 13 Pro were hacked at live event

Four zero day failures Found on Galaxy S23 and Xiaomi 13 Pro A hacking incident that took place this Tuesday (24) during Pwn20wn Toronto 2023.

Results are published in real time as they are verified. Those responsible for the discoveries were taken home Prizes between $20,000 and $50,000. Among the problems found was a loophole that allowed the Samsung mobile phone system to be hacked.

Galaxy S23 Zero Day Malfunctions

The top award was given to the Pentest Limited team who managed to perform “Improper login verification”. They won $50,000 and 5 Master of Pwn points.

This loophole allows the data stream to be redirected, allowing you to bypass input validation. In general terms, the function allows you to change control of a device resource or run arbitrary code.

The other prize worth US$25,000 and 5 Master of Pwn points were awarded to the STAR Labs SG team. They discovered Galaxy S23 Contains an extensive list of allowed entriesIt is a situation that leaves the system more vulnerable.

Xiaomi 13 Pro Zero Day Malfunctions

The biggest reward given to Xiaomi 13 Pro hackers was 40,000 dollars and 4 Master of Pwn points. Team Viettel managed to perform a single bug attack on the device. However, in this case, no details about the violation were provided.

Finally, NCC Group received $20,000 and 4 Master of Pwn points for managing to carry out an attack on Xiaomi 13 Pro. No details were given about the vulnerability.

Companies should work on fixes

Events like Pwn20wn Toronto 2023 aim to Encourage safe discovery of Zero Day breaches and report them privately to companies. The aim is to make companies aware of failures before they become a real problem among consumers.

Now Xiaomi and Samsung will be able to work on fixes for the vulnerabilities without criminals having to exploit this vulnerability.