Samsung releases patch to fix serious flaws highlighted by US government

Samsung has released an urgent update for its Galaxy phones that includes security fixes. The breach was discovered by Google in July of this year and also affected devices in the Pixel family.

According to Google, Two vulnerabilities are currently being exploited by criminalsThe breaches are known as CVE-2024-32896 and CVE-2024-29745 and have been added to the Known Exploited Vulnerabilities (KEV) catalog by the United States Cybersecurity Agency (CISA).

For security reasons, the United States government orders: All federal employees must update their devices by August 28th of this yearOtherwise they should stop using Samsung mobile phones.

Although the order only applies to federal employees, other businesses and government agencies that comply with government regulations should take the same precautionsThe decision is therefore expected to impact a significant number of consumers.

Know the security flaws

In the CVE (Common Vulnerabilities and Exposures) catalog, the CVE-2024-32896 vulnerability has a CVSS (risk level) of 7.8. This is a logical failure This allows you to elevate privileges based on user interaction.

The CVE-2024-29745 flaw is reported with CVSS level 5.5. In this case, the error could allow information screen no additional execution permissions and no user interaction.

THE The security patch was released simultaneously for all Samsung devices is still under corporate support. Therefore, even if the mobile phone is on a bimonthly or semiannual update cycle, it should receive the August package.

according to ForbesThe build already reaches older phones like the Galaxy S21 or Galaxy S20. There is no information on whether the update is coming to other devices, nor even whether it is available to the Brazilian public.