Samsung's Exynos chipsets are used in smartphones, mobile devices, wearables and automobiles. Photo: Wikipedia
Samsung's Exynos chipsets are used in smartphones, mobile devices, wearables and automobiles. Photo: Wikipedia
Samsung's Exynos chipsets are used in smartphones, mobile devices, wearables and automobiles. Photo: Wikipedia
Samsung's Exynos chipsets are used in smartphones, mobile devices, wearables and automobiles. Photo: Wikipedia

Google says Samsung, Pixel and Vivo phones at risk due to vulnerable Exynos chips


Alkesh Sharma
  • English
  • Arabic

Google’s Project Zero security research team has discovered 18 security concerns related to Samsung’s Exynos chipsets that are used in smartphones, mobile devices, wearables and cars.

Four of the 18 reported vulnerabilities are critical and could let cyber criminals hack smartphones remotely, with only the help of the user's phone number.

Tim Willis, head of Project Zero, said tests conducted by the company confirmed that those four vulnerabilities allow a hacker to “remotely compromise a phone at the baseband level with no user interaction”.

“With limited additional research and development, we believe that skilled attackers would be able to quickly create an operational exploit to compromise affected devices silently and remotely,” Mr Willis said.

However, the report revealed, the 14 other vulnerabilities are not as severe, as they require either a malicious mobile network operator or an attacker with local access to the device.

Affected mobile devices include South Korean company Samsung’s S22, M33, M13, M12, A71, A53, A33, A21s, A13, A12 and A04 series phones.

Other devices include Chinese brand Vivo's, S16, S15, S6, X70, X60 and X30 series phones; Google’s Pixel 6 and Pixel 7 series phones; and any vehicles that use the Exynos Auto T5123 chipset.

Under its standard disclosure policy, Project Zero discloses security vulnerabilities to the public a set time after reporting them to a software or hardware vendor.

What will be the patch timeline?

It’s still not clear.

Project Zero researchers expect that patch timelines will vary per manufacturer. For example, affected Pixel devices have already received a security update this month. Although Google has already patched the issues for Pixel 7 series phones, the update has not reached the Pixel 6 series phones yet.

In the meantime, Google recommends that users with affected devices can protect themselves from the vulnerabilities by turning off Wi-Fi calling and Voice-over-LTE (VoLTE) in their device settings. VoLTE is how phones and carriers transmit our voices during a call.

“We encourage end users to update their devices as soon as possible, to ensure that they are running the latest builds that fix both disclosed and undisclosed security vulnerabilities,” Mr Willis said.

Samsung, which was the largest smartphone manufacturer last year, and other vendors have yet to resolve the issues affecting the Exynos chips.

The Samsung Galaxy S22 smartphone is one of the affected devices. AFP
The Samsung Galaxy S22 smartphone is one of the affected devices. AFP

In September last year, Samsung said it suffered a cyber security breach in July that exposed the personal information of some customers in the US.

Step by step

2070km to run

38 days

273,600 calories consumed

28kg of fruit

40kg of vegetables

45 pairs of running shoes

1 yoga matt

1 oxygen chamber

How much sugar is in chocolate Easter eggs?
  • The 169g Crunchie egg has 15.9g of sugar per 25g serving, working out at around 107g of sugar per egg
  • The 190g Maltesers Teasers egg contains 58g of sugar per 100g for the egg and 19.6g of sugar in each of the two Teasers bars that come with it
  • The 188g Smarties egg has 113g of sugar per egg and 22.8g in the tube of Smarties it contains
  • The Milky Bar white chocolate Egg Hunt Pack contains eight eggs at 7.7g of sugar per egg
  • The Cadbury Creme Egg contains 26g of sugar per 40g egg
'Nope'
%3Cp%3E%3Cstrong%3EDirector%3A%3C%2Fstrong%3E%20Jordan%20Peele%0D%3Cbr%3E%3Cstrong%3EStars%3A%3C%2Fstrong%3E%20Daniel%20Kaluuya%2C%20Keke%20Palmer%2C%20Brandon%20Perea%2C%20Steven%20Yeun%0D%3Cbr%3E%3Cstrong%3ERating%3A%3C%2Fstrong%3E%203.5%2F5%3C%2Fp%3E%0A
COMPANY PROFILE
Name: HyperSpace
 
Started: 2020
 
Founders: Alexander Heller, Rama Allen and Desi Gonzalez
 
Based: Dubai, UAE
 
Sector: Entertainment 
 
Number of staff: 210 
 
Investment raised: $75 million from investors including Galaxy Interactive, Riyadh Season, Sega Ventures and Apis Venture Partners
Living in...

This article is part of a guide on where to live in the UAE. Our reporters will profile some of the country’s most desirable districts, provide an estimate of rental prices and introduce you to some of the residents who call each area home. 

Global state-owned investor ranking by size

1.

United States

2.

China

3.

UAE

4.

Japan

5

Norway

6.

Canada

7.

Singapore

8.

Australia

9.

Saudi Arabia

10.

South Korea

MATCH SCHEDULE

Uefa Champions League semi-final, first leg
Tuesday, April 24 (10.45pm)

Liverpool v Roma

Wednesday, April 25
Bayern Munich v Real Madrid (10.45pm)

Europa League semi-final, first leg
Thursday, April 26

Arsenal v Atletico Madrid (11.05pm)
Marseille v Salzburg (11.05pm)

Tu%20Jhoothi%20Main%20Makkaar%20
%3Cp%3E%3Cstrong%3EDirector%3A%20%3C%2Fstrong%3ELuv%20Ranjan%26nbsp%3B%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EStars%3A%20%3C%2Fstrong%3ERanbir%20Kapoor%2C%20Shraddha%20Kapoor%2C%20Anubhav%20Singh%20Bassi%20and%20Dimple%20Kapadia%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3ERating%3A%3C%2Fstrong%3E%203%2F5%3C%2Fp%3E%0A
Pakistan Super League

Previous winners

2016 Islamabad United

2017 Peshawar Zalmi

2018 Islamabad United

2019 Quetta Gladiators

 

Most runs Kamran Akmal – 1,286

Most wickets Wahab Riaz –65

UAE currency: the story behind the money in your pockets
Benefits of first-time home buyers' scheme
  • Priority access to new homes from participating developers
  • Discounts on sales price of off-plan units
  • Flexible payment plans from developers
  • Mortgages with better interest rates, faster approval times and reduced fees
  • DLD registration fee can be paid through banks or credit cards at zero interest rates
Honeymoonish
%3Cp%3E%3Cstrong%3EDirector%3A%3C%2Fstrong%3E%20Elie%20El%20Samaan%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3EStarring%3A%20%3C%2Fstrong%3ENour%20Al%20Ghandour%2C%20Mahmoud%20Boushahri%3C%2Fp%3E%0A%3Cp%3E%3Cstrong%3ERating%3A%3C%2Fstrong%3E%203%2F5%3C%2Fp%3E%0A
The specs

Engine: 2.3-litre, turbo four-cylinder

Transmission: 10-speed auto

Power: 300hp

Torque: 420Nm

Price: Dh189,900

On sale: now

The Settlers

Director: Louis Theroux

Starring: Daniella Weiss, Ari Abramowitz

Rating: 5/5

 

Company: Instabug

Founded: 2013

Based: Egypt, Cairo

Sector: IT

Employees: 100

Stage: Series A

Investors: Flat6Labs, Accel, Y Combinator and angel investors

The National in Davos

We are bringing you the inside story from the World Economic Forum's Annual Meeting in Davos, a gathering of hundreds of world leaders, top executives and billionaires.

Why%20all%20the%20lefties%3F
%3Cp%3ESix%20of%20the%20eight%20fast%20bowlers%20used%20in%20the%20ILT20%20match%20between%20Desert%20Vipers%20and%20MI%20Emirates%20were%20left-handed.%20So%2075%20per%20cent%20of%20those%20involved.%0D%3Cbr%3EAnd%20that%20despite%20the%20fact%2010-12%20per%20cent%20of%20the%20world%E2%80%99s%20population%20is%20said%20to%20be%20left-handed.%0D%3Cbr%3EIt%20is%20an%20extension%20of%20a%20trend%20which%20has%20seen%20left-arm%20pacers%20become%20highly%20valued%20%E2%80%93%20and%20over-represented%2C%20relative%20to%20other%20formats%20%E2%80%93%20in%20T20%20cricket.%0D%3Cbr%3EIt%20is%20all%20to%20do%20with%20the%20fact%20most%20batters%20are%20naturally%20attuned%20to%20the%20angles%20created%20by%20right-arm%20bowlers%2C%20given%20that%20is%20generally%20what%20they%20grow%20up%20facing%20more%20of.%0D%3Cbr%3EIn%20their%20book%2C%20%3Cem%3EHitting%20Against%20the%20Spin%3C%2Fem%3E%2C%20cricket%20data%20analysts%20Nathan%20Leamon%20and%20Ben%20Jones%20suggest%20the%20advantage%20for%20a%20left-arm%20pace%20bowler%20in%20T20%20is%20amplified%20because%20of%20the%20obligation%20on%20the%20batter%20to%20attack.%0D%3Cbr%3E%E2%80%9CThe%20more%20attacking%20the%20batsman%2C%20the%20more%20reliant%20they%20are%20on%20anticipation%2C%E2%80%9D%20they%20write.%0D%3Cbr%3E%E2%80%9CThis%20effectively%20increases%20the%20time%20pressure%20on%20the%20batsman%2C%20so%20increases%20the%20reliance%20on%20anticipation%2C%20and%20therefore%20increases%20the%20left-arm%20bowler%E2%80%99s%20advantage.%E2%80%9D%0D%3Cbr%3E%3C%2Fp%3E%0A
RESULTS

2.15pm: Al Marwan Group Holding – Handicap (PA) Dh40,000 (Dirt) 1,200m
Winner: SS Jalmod, Antonio Fresu (jockey), Ibrahim Al Hadhrami (trainer)

2.45pm: Sharjah Equine Hospital – Maiden (PA) Dh40,000 (D) 1,000m
Winner: Ghallieah, Sebastien Martino, Jean-Claude Pecout

3.15pm: Al Marwan Group Holding – Handicap (PA) Dh40,000 (D) 1,700m
Winner: Inthar, Saif Al Balushi, Khalifa Al Neyadi

3.45pm: Al Ain Stud Emirates Breeders Trophy – Conditions (PA) Dh50,000 (D) 1,700m
Winner: MH Rahal, Richard Mullen, Elise Jeanne

4.25pm: Sheikh Mansour bin Zayed Al Nahyan Cup – Prestige Handicap (PA) Dh100,000 (D) 1,200m
Winner: JAP Aneed, Ray Dawson, Irfan Ellahi

4.45pm: Sharjah Equine Hospital – Handicap (TB) Dh40,000 (D) 1,200m
Winner: Edaraat, Antonio Fresu, Musabah Al Muhairi

Updated: March 19, 2023, 1:21 PM`