news

Samsung is installing critical patches on all Galaxy devices to protect against active exploits

2024-07-23

한어Русский языкEnglishFrançaisIndonesianSanskrit日本語DeutschPortuguêsΕλληνικάespañolItalianoSuomalainenLatina

Samsung has confirmed that critical security patches for Galaxy devices will begin rolling out as early as August to address a critical zero-day vulnerability that has been actively exploited, significantly shorter than previous estimates that a fix could take three months or more.


The vulnerability was severe enough that the U.S. government ordered federal employees to update their Pixel devices by July 4. Google initially believed it was a Pixel-only issue, but later acknowledged that the vulnerability has expanded to all Android devices. However, the specific details of the vulnerability have been limited.

In addition to CVE-2024-32896, the security-focused Android project GrapheneOS (which was responsible for the initial vulnerability disclosure) has also issued a warning about another vulnerability. CVE-2024-29745 is actually a "more serious issue" but has not yet been addressed on Android devices other than Pixels. However, Google said that this vulnerability needs to be chained with other vulnerabilities to pose a significant threat.

Because of the fragmented nature of the Android ecosystem and the need for carriers and manufacturers to validate and customize patches for their own devices, critical updates can take months to roll out.


However, Samsung's quick response is welcome. Given the severity of the vulnerability and the potential for exploitation, Samsung users are advised to prioritize installing the August update as soon as it becomes available for their specific models.

While the main focus of the August update is to address these zero-day vulnerabilities, Samsung is expected to add other enhancements and features. Rumor has it that the update could bring significant camera improvements to the Galaxy S24 series and introduce new Galaxy AI features.

Samsung is expected to release the first Android 24-based One UI 15.0 Beta update for the Galaxy S24 and other high-end devices in the coming months. The stable One UI 7.0 update is likely to be rolled out to most compatible Galaxy phones and tablets by the end of 2024.