Updates
Samsung September 2021 Security Patch Details – New Fixes (CVE/SVE)
Though a bit late, but Samsung has finally released its September 2021 One UI security patch details alongside the Android patches by Google. As always, the newly published security bulletin brings detailed information including different levels of CVEs such as critical, high and moderate as well as Samsung SVEs.
If we go with Samsung’s official Firmware Updates support page, the September 2021 security patch comes with fixes for 3 critical, 29 high, and 14 moderate CVEs from Google. At the same time, 2 CVEs had already been included in previous updates, while 9 are not applicable on Galaxies.
Below, you can see the CVEs that will be fixed on your Samsung Galaxy device after upgrading to September 2021 security patch.
Critical
- CVE-2021-1972, CVE-2021-1976, CVE-2021-0687
High
- CVE-2021-28375, CVE-2020-14381, CVE-2021-0582, CVE-2021-0578, CVE-2021-0579, CVE-2021-0580, CVE-2021-0581, CVE-2021-30261, CVE-2021-30260, CVE-2021-1939, CVE-2021-1947, CVE-2021-1904, CVE-2021-0639, CVE-2019-10581, CVE-2021-0518, CVE-2021-0595, CVE-2021-0683, CVE-2021-0684, CVE-2021-0685, CVE-2021-0688, CVE-2021-0686, CVE-2021-0689, CVE-2021-0690, CVE-2021-0598, CVE-2021-0692, CVE-2021-0428, CVE-2021-0644, CVE-2021-0682, CVE-2021-0693
Moderate
- CVE-2021-0565, CVE-2021-0556, CVE-2021-0562, CVE-2021-0566, CVE-2021-0536, CVE-2021-0537, CVE-2021-0538, CVE-2021-0539, CVE-2021-0547, CVE-2021-0548, CVE-2021-0553, CVE-2021-0549, CVE-2021-0552, CVE-2021-0691
Already included in previous updates
- CVE-2021-3347, CVE-2021-0564
Not applicable to Samsung devices
- CVE-2021-1919, CVE-2021-1916, CVE-2021-1920, CVE-2021-0573, CVE-2021-0574, CVE-2021-0576, CVE-2021-1914, CVE-2021-1978, CVE-2020-3633
Join Sammy Fans on Telegram
Aside from CVE fixes, Samsung also offers additional security improvements, better known as SVE, especially for the Galaxy consumers. This month, the company bringing repairs for 23 Samsung Vulnerabilities and Exposures (SVE) items. (Some of them mentioned below)
SVE-2021-21619 (CVE-2021-25457): Kernel Information Disclosure in the Vision DSP Kernel Driver
Severity: Moderate
Affected versions: Q(10.0), R(11.0) devices with Exynos 980, 9830, 2100 chipsets
- An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information.
- The patch adds proper input validation in DSP driver.
SVE-2021-21943 (CVE-2021-25450): Path traversal vulnerability in FactoryAirCommandManager
Severity: High
Affected versions: O(8.1), P(9.0), Q(10.0), R(11.0)
- Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows attackers to write file as system uid via remote socket.
- The patch addresses incorrect implementation of file path validation check logic.
SVE-2021-22094 (CVE-2021-25449): Arbitrary code execution on mediaextractor process
Severity: Moderate
Affected versions: O(8.1), P(9.0), Q(10.0), R(11.0)
- An improper input validation vulnerability in libsapeextractor library prior to SMR Sep-2021 Release 1 allows attackers to execute arbitrary code in mediaextractor process.
- The patch adds proper input check to prevent buffer overflow.
SVE-2021-21959 (CVE-2021-25452): Kernel Permanent Denial of Service Vulnerability in the Vision DSP Kernel Driver
Severity: Moderate
Affected versions: Q(10.0), R(11.0) devices with Exynos 980, 9830, 2100 chipsets
- An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of service on the device.
- The patch adds proper input check to prevent loading unintended file in path.
SVE-2021-21041 (CVE-2021-25453): Leak Bluetooth information through Broadcast in Bluetooth app
Severity: High
Affected versions: O(8.1), P(9.0), Q(10.0), R(11.0)
- Some improper access control in Bluetooth APIs prior to SMR Sep-2021 Release 1 allows untrusted application to get Bluetooth information.
- The patches add proper access control to prevent Bluetooth information leak.
SVE-2021-21620 (CVE-2021-25458): NULL pointer dereference vulnerability in the ION Driver
Severity: Low
Affected versions: O(8.1), P(9.0), Q(10.0), R(11.0) devices with Exynos chipsets
- NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption.
- The patch adds proper input check to prevent null pointer dereference.
SVE-2021-22602 (CVE-2021-25459): Improper access control in BlockChainService
Severity: Moderate
Affected versions: Select Q(10.0), R(11.0)
- An improper access control vulnerability in sspInit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to start BlockchainTZService.
- The patch adds the proper permission check to prevent improper access to BlockchainTZService.
SVE-2021-22603 (CVE-2021-25460): Improper access control in BlockChainService
Severity: Moderate
Affected versions: Select Q(10.0), R(11.0)
- An improper access control vulnerability in sspExit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to terminate BlockchainTZService.
- The patch adds the proper permission check to prevent improper access to BlockchainTZService.
SVE-2021-22411 (CVE-2021-25461): APAService Stack Overflow
Severity: Low
Affected versions: O(8.1)
- An improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based Buffer Overflow.
- The patch adds proper length check in APAService.
SVE-2021-21413 (CVE-2021-25451): Sensitive information disclosure in NetworkPolicyManagerService
Severity: Moderate
Affected versions: P(9.0), Q(10.0), R(11.0)
- A PendingIntent hijacking in NetworkPolicyManagerService prior to SMR Sep-2021 Release 1 allows attackers to get IMSI data.
- The patch addresses the intent in NetworkPolicyManagerService to prevent unprivileged access.
SVE-2021-22278 (CVE-2021-25454): OOB read vulnerability in ‘libsaacextractor.so’
Severity: Low
Affected versions: O(8.1), P(9.0), Q(10.0), R(11.0)
- OOB read vulnerability in libsaacextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute remote DoS via forged aac file.
- The patch adds length check code in libsaacextractor library.
SVE-2021-22291 (CVE-2021-25455): OOB read vulnerability in ‘libsaviextractor.so’
Severity: Low
Affected versions: O(8.1), P(9.0), Q(10.0), R(11.0)
- OOB read vulnerability in libsaviextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to access arbitrary address through pointer via forged avi file.
- The patch adds length check code in libsaviextractor library.
SVE-2021-22343 (CVE-2021-25456): OOB read vulnerability in ‘libswmfextractor.so’
Severity: Moderate
Affected versions: O(8.1), P(9.0), Q(10.0), R(11.0)
- OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file.
- The patch adds length check code in libswmfextractor library.
SVE-2021-21969 (CVE-2021-25462): Null Pointer Dereference vulnerability in the NPU Driver
Severity: Low
Affected versions: P(9.0), Q(10.0), R(11.0) devices with Exynos chipsets
- NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption.
- The patch adds proper input check to prevent null pointer dereference.
Samsung One UI 3.1.1
Released alongside the Galaxy Z Fold 3 and Galaxy Z Flip 3, the One UI 3.1.1 version is making its way to more and more Galaxy devices through software updates. So far, the company’s every flagship smartphone (including older foldables) has started grabbing the One UI 3.1.1 features.
What about Android 12 One UI 4?
Later last month, Samsung teased that the Android 12-based One UI 4 Beta is coming soon for the Galaxy S21 series smartphone owners in South Korea, the US and Germany. The Beta participation had already begun but the company is yet to deliver the first One UI 4 Beta build to the consumers.
Galaxy phones have started getting the September 2026 Google Play system update before Samsung brings them the One UI 9 software.
On September 16, Samsung officially announced the One UI 9 rollout for Galaxy S26 series. Owners of the flagship lineup have started getting the latest update in South Korea, with Global expansion anticipated on September 21.
Google Play system update, that too with the September 2026 version, is already rolling out to Samsung Galaxy devices. This release isn’t linked to a specific Android version, as the rollout is happening across various models.
September 2026 update introduces essential bug fixes for account management alongside improved location-sharing experiences. Additionally, developers gain helpful features supporting maps and cross-operating system device setups.
Device connectivity and location services receive powerful developer tools to streamline app processes. System management services improve overall updatability, while diagnostic bug fixes ensure a smoother experience.
Wallet updates enable real-time cart price adjustments during checkout. Users also receive helpful notifications for re-adding tap-and-pay cards, alongside new NFC transit card support.
The Play Store introduces the Contribution Hub for tracking review impact. Finally, AICore brings model management enhancements, expanded device compatibility, and performance optimizations across phones.
Here’s everything new or changed in Google Play system update
September 2026
Google Play services v26.36 (2026-09-14)
Account Management
- [Phone] Bug fixes for Account Management related services.
- [Phone, Wear] With the updates to account management, you’ll now get an improved experience with location sharing.
Developer Services
- [Phone] New developer features for Google and third party app developers to support Maps related processes in their apps.
- [Phone] You can now set up devices across operating systems.
Device Connectivity
- [Phone, Wear] New developer features for Google and third party app developers to support Device Connectivity related processes in their apps.
Location & Context
- [Phone] New developer features for Google and third party app developers to support Location & Context related processes in their apps.
System Management
- [Auto, PC, Phone, TV, Wear] Bug fixes for System Management & Diagnostics related services.
- [Auto, Phone, TV, Wear] Updates to system management services that improve Updatability.
Wallet - [PC, Phone] Enable real-time cart price adjustments when a user selects or changes their payment method during checkout.
- [Phone] You’ll now receive a notification to add your Google Wallet tap and pay cards again when you switch to a new device.
Google Play Store v53.2 (2026-09-14)
- [Phone] You can now use the Contribution Hub cluster on the “You” tab to submit ratings and reviews while you track the social impact of your contributions.
Android WebView v154 (2026-09-10)
- We changed WebView Finch from Application consistent to Device level consistent.
- Improvements to security and privacy and updates for bug fixes.
- New developer features for Google & 3rd party app developers to support functionality related to displaying web content in their apps.
Important: Some features may be experimental and available to certain users.
Google Play services v26.35 (2026-09-07)
Account Management
- [Phone, Wear] Improvements to Supervision.
- [Phone] A new infrastructure within Kids Auth Module to manage and display regulatory compliance notices on Android.
Location & Context
- [Phone] This update adds safety status information to shared locations in the location sharing API.
Wallet - [Phone] You can now use NFC to add physical transit card passes and balances to Google Wallet.
- [Phone] This update introduces a new “Add a card” success screen with an improved UI.
- [Phone] New developer features for Google and third party app developers to support Digital Wallet & Payments related processes in their apps.
Google Play Store v53.1 (2026-09-07)
- [Phone] You can now find a short description that highlights a key feature in similar apps, in the similar apps section of the app details pages.
- [Phone] You can now find on what devices an app is installed when you browse recommendations on the other devices sub-navigation.
- [Phone] With a new navigation bar, you can explore more of your interests directly on Play home pages.
Android AICore
- [PC, Phone] Model management enhancements, expanded device compatibility, performance optimizations, and enhancements to diagnostics.
Android System Intelligence B.29 / C.7 (2026-09-03)
- [Phone] Bug fixes and maintenance changes.
💥 Google Play system update available
Update size: 81 MB
1 September 2026
All Galaxy users check the update which has received the update, please share it. pic.twitter.com/ci36DGhwgx
— Kailash (@Kailash0729) September 16, 2026
Samsung has released the September 2026 security update for the Galaxy Z Fold 8 and Galaxy Z Flip 8 in the US. The update was released earlier in South Korea and is now reaching US users. It mainly focuses on fixing security issues and keeping the phones safe.
September 2026 security update comes with a firmware version ending in AZI5. Users in the US can check their phone’s software version to see if the update is available. The rollout may happen in phases, so some users may get it later than others.
Samsung’s September 2026 security patch includes up to 90 fixes. Out of these, 58 are Android security fixes. They include 18 critical fixes and 40 high-level fixes. The update also includes Exynos-related improvements from Samsung Semiconductor.
In addition, Samsung Electronics has added 31 One UI security fixes. These fixes help improve the safety of Samsung’s software and features. The update brings several important security improvements to Samsung’s latest foldable phones.
Galaxy Z Fold 8 and Galaxy Z Flip 8 users can check for the update manually. Open Settings on the phone, tap Software update, and then select Download and install.
If the update is available, follow the instructions on the screen to download and install it. It is recommended to use a Wi-Fi connection and keep the phone sufficiently charged before starting the update.
Samsung has started rolling out a new software update with a September 2026 security patch for the Galaxy A57. It is a regular security update that helps keep the phone safe and secure.
The new update comes with firmware version A576BXXS6AZI3. It is around 500MB in size. The update does not add major new features. Its main focus is on security improvements and fixing software issues.
September 2026 patch fixes security problems in the phone’s software. Installing it can help protect the Galaxy A57 from possible security threats. Samsung recommends keeping phones updated to get the latest security fixes.
The update is currently rolling out in India, Bangladesh, and Nepal. Samsung may expand the rollout to other markets later. The update may not reach every phone at the same time because Samsung usually releases software updates in stages.
To check for the update, open Settings on your Galaxy A57. Go to Software update and select Download and install. If the update is available, download and install it. Once the process is complete, restart the phone if required.
Users waiting for One UI 9.0 will have to wait a little longer. Samsung is still testing the new software. The Galaxy A57 is currently on its second One UI 9.0 beta update, so the stable version is not expected to arrive this month.
Samsung has begun rolling out its September 2026 security update to Galaxy devices. The firmware deployment was very slow in August, but the company has now returned to its usual pace of offering the latest patches.
What’s new in the September 2026 update
Samsung’s September 2026 OTA package includes as many as 90 fixes.
The update comes with 58 Android patches: 18 critical and 40 high. Besides, it has Exynos-specific improvements from Samsung Semiconductor, and 31 One UI-linked SVE items are provided by Samsung Electronics.
September 2026 update arrived for these Samsung devices
- Galaxy Z Fold 8 – AZI5 [as spotted by Alfaturk]
- Galaxy Z Fold 8 Ultra – AZI5
- Galaxy Z Flip 8 – Soon
How to download and install
Recent Samsung phones support Seamless Updates technology. This solution significantly reduces downtime while installing a new software update. Most of the process takes place without requiring the phone to shut down.
Update notifications arrive a bit late, but you can also manually check for updates. To do so, open Settings > Software update > Download and install.
Samsung has begun rolling out the first software update for the Galaxy Watch Ultra 2 in India. The new update enhances security and improves the overall performance of the smartwatch.
The update comes with the firmware version L715USQS1AZH4. It has a download size of around 230MB, so users may need a little time and enough internet data to install it.
The main highlight of this update is the August 2026 security patch. Samsung has not added any major new features with this update. Instead, the company is focusing on making the watch more secure and fixing possible software issues.
Galaxy Watch Ultra 2 users in India should start seeing the update on their devices. However, the rollout may happen in stages, so some users may receive it earlier than others.
To check for the update, users can open the Galaxy Wearable app on their connected smartphone. From there, go to Watch settings, select Watch software update, and tap Download and install if the update is available. Before installing the update, users should also keep the watch connected to their smartphone during the update process.
The first update is important even though it does not bring any major new features, but it enhances security and stability. The Galaxy Watch Ultra 2 is Samsung’s latest and premium smartwatch, so regular software updates will be important for keeping the device secure and running smoothly.
-
One UI2 days agoHere’s when One UI 9 stable update will arrive on these Samsung Galaxy phones
-
News2 days agoThe best-selling phone in Brazil was an unexpected Samsung Galaxy
-
News1 day agoGalaxy S25 and S25 FE deal prices revealed for Flipkart Big Billion Days
-
Phones1 day agoBefore you buy an iPhone 18 Pro, see how tough it really is