Android
[Samsung Responded] Severe Exynos modem vulnerabilities found, these models are affected
Google Project Zero team found severe 0-day vulnerabilities with the Samsung Exynos modem. Affected Exynos modem used in various Samsung devices including the Galaxy S22 series along with the Google Pixel 6a/6/6 Pro and Galaxy wearables.
Follow our socials → Google News, Telegram, Twitter, Facebook
According to the information, Project Zero reported 18 vulnerabilities in Exynos modems in late 2022 and early 2023. And notably, four of the flaws, including CVE-2023-24033, involve internet-to-baseband remote code execution:
Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require only that the attacker know the victim’s phone number. With limited additional research and development, we believe that skilled attackers would be able to quickly create an operational exploit to compromise affected devices silently and remotely.
Among 18, 14 are not considered as severe because they “require either a malicious mobile network operator or an attacker with local access to the device.” The team is making a “policy exception to delay disclosure for the four vulnerabilities that allow for internet-to-baseband remote code execution.”
Affected devices
Samsung Semiconductor (January 2023) data reveals that Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5123 are affected chipsets.
Google compiled a list of likely affected products:
Samsung Galaxy:
- S22 series
- M33
- M13
- M12
- A71
- A53
- A33
- A21
- A13
- A12
- A04 series
- Watch 4 series
- Watch 5 series
Google:
- Pixel 6 and 6 Pro
- Pixel 6a
- Pixel 7 and 7 Pro
Vivo:
- S16
- S15
- S6
- X70
- X60
- X30 series
Wearable:
- Any wearables that use the Exynos W920 chipset
Vehicle:
- Any vehicles that use the Exynos Auto T5123 chipset
Samsung March 2023 Patch
Samsung detailed the March 2023 security patch earlier this month, which doesn’t provide fixes to the severe CVE-2023-24033 vulnerability. At the same time, Google listed the CVE in its March 2023 Android security bulletin, which started to roll out to Pixel devices on Monday.
Here’s what Samsung said:
At the end of last year, we received a security issue notification for Google project zero, and Samsung has provided all customers with a patch version for this vulnerability, and the related issues have now been resolved.
| Via |
Last month, Samsung rolled out the first and second Beta builds of its Android 14 firmware. Currently, Samsung’s Galaxy S23, S23 Plus, and S23 Ultra devices are eligible to download and install One UI 6 Beta. The official way to get Beta is registration through Members, while there’s a custom installation way as well.
Courtesy of BredzProh (senior member at XDA Forums), the official One UI 6 Beta builds are available for download and install on the Galaxy S23 series. For Europe, the company is using a universal CSC Code – EUX, making it easier (indirectly) to install the firmware manually.
Follow our socials → Google News, Telegram, X (formerly Twitter), Facebook
DOWNLOAD ONE UI 6 BETA ROM
The Beta Program is only accessible for T-Mobile consumers in the United States along with the user having a carrier-unlocked smartphone. Do note that the download links are not just the way to get Beta in any country as you need to perfectly flash firmware through the ADB method. Links below:
Galaxy S23 Ultra
SM-S918B
AWF7 → ZWH8 [Beta 1]
ZWH8 → ZWHO [Beta 2]
ZWHO ➝ ZWI8 [Beta 3]
ZWIB ➝ ZWIC [Beta 4]
ZWIC ➝ ZWIK [Beta 5]
SM-S918U1
AWFD → ZWH8 [Beta 1]
ZWH8 → ZWHO [Beta 2]
ZWHO ➝ ZWI8 [Beta 3]
ZWIB ➝ ZWIC [Beta 4]
ZWIC ➝ ZWIK [Beta 5]
SM-S918U
AWFD → ZWH8 [Beta 1]
ZWH8 → ZWHO [Beta 2]
ZWHO ➝ ZWI8 [Beta 3]
ZWIB ➝ ZWIC [Beta 4]
ZWIC ➝ ZWIK [Beta 5]
Galaxy S23 Plus
SM-S916B
AWH3 → ZWHO [B1]
ZWHO ➝ ZWI8 [B3]
ZWIC ➝ ZWIK [N/A]
Galaxy S23
SM-S911B
AWH3 → ZWHO [B1]
AWH3 ➝ ZWI8 [5.1 to B3]
SM-S911U1
AWGH → ZWH8 [B1]
ZWH8 → ZWHO [B2]
ZWHO ➝ ZWI8 [B3]
How to install [ADB Method]
- Download the ROM (right build) for your Galaxy device.
- Find the file in My Files and change the extension from .bin to update.zip
- Download and install ADB on your PC.
- Make sure to have “C:\Android\platform-tools” added to “Path” in System variables.
- On your phone, go to Settings > About phone > Software information
- Repeatedly tap on the build number to activate Developer options, and then open it
- From Developer options, find and enable “USB debugging”
- Connect your phone to your PC.
- Eensure it has Samsung Driver installed from “Smart Switch for PC.”
- You may enable the “Always allow from this computer” if it’s your personal PC.
- Tap on Allow.
Installation
Your data will be wiped.
- On your PC, move the “update.zip” file to “C:\Android\platform-tools”.
- Click on the Start Button.
- Click on Windows Terminal (Admin) or PowerShell (Admin).
- In the Terminal, type “adb devices” and execute it.
- If you didn’t enable “Always allow from this computer”, the pop up will appear again on the phone. Tap on Allow.
- Type “adb reboot recovery” and execute it.
- Your phone will boot to Recovery Mode.
- Navigating with the volume buttons and selecting the power button, go to “Apply update from ADB”
- If you want to force exit from this screen, hold down the Volume down and Power buttons.
- Back to the PC, type: “.\adb sideload “C:\Android\platform-tools\update.zip” and execute it.
- The installation process will start and One UI 6.0 beta will be installed.
- After the update process has finished, back to the PC, execute “adb reboot recovery” again.
- Go to “Wipe cache partition” and select Yes.
- Then select “Reboot system now”.
Note:
- Your data will be wiped.
- If you get an error, you may have downloaded the wrong build, or your device doesn’t support the beta program at all. If you are sure that you have downloaded the right build, try again using different cables, USB ports, or PCs.)
- Trigger manual firmware installation at your own risk.
Alternative Way
- Here is how you can download and install Samsung One UI Beta without PC – Read More
Android 14
Samsung Galaxy Z Fold 5, Flip 5 to receive One UI 6.0 beta in October, Community Moderator confirms
One UI 6.0 Beta update for Samsung Galaxy Z Flip 5 and Galaxy Z Fold 5 has been delayed, which was scheduled to be released in late September 2023. This announcement is made by Samsung’s Community Moderator through a comment on the Samsung Members app.
For this delay, the moderator stated that more work is required to ensure the stability of the One UI 6.0 beta software for Samsung Galaxy Z Flip 5 and Galaxy Z Fold 5 smartphones.
In addition, the official assured that the company will do its best to deliver stable software so that the beta version can be launched as early as possible in October after the Chuseok holiday, which is a significant Korean festival that falls in late September this year.
Previously, Samsung’s community moderator had disclosed that the One UI team was working diligently in development and review to complete the beta version with the aim of distributing it within September. However, it seems that the team encountered some issues that required more time to fix.
Samsung guarantees 4 years of Android OS and 5 years of security updates to Galaxy devices. Meanwhile, Google is about to match Apple’s iOS support of 7 years of OS updates, starting with the Pixel 8 series, which Samsung must replicate for Galaxy devices.
In a recent development, a leaked Pixel 8 series specifications sheet revealed that Google will pledge 7 years of Android OS and security updates. It’s about to be the same as Apple does with all of its iPhone models, beating the Samsung software policy by a big margin.
Follow our socials → Google News, Telegram, X (formerly Twitter), Facebook
Samsung has a big lead in the smartphone market, thanks to its longer software support. Meanwhile, Google’s tentative announcement will make a big impact on the Galaxy maker’s policy. And to maintain consumer satisfaction, the Korean tech giant must replicate Google.
Google Pixel phones currently offer three generations of OS upgrades and five years of security patches. Samsung, on the other hand, has a wide range of Galaxy devices eligible for 4 OS plus 5 years of security updates. However, Apple’s iPhones get up to 7 years of major iOS upgrades.
The US tech giant will launch the Pixel 8 series on October 4. If it has plans to extend software support, the announcement will be done during the launch. It will be interesting to see if the company includes older Tensor-powered smartphones in new support plan.
Since the Pixel 6 series, Google is bringing a self-designed Tensor chipset, equipped with AI capabilities and machine learning. The Tensor G3 is based on Exynos and is being manufactured by Samsung, with Google plans to switch to TSMC in the next few years.
As the technology is growing such faster, it’s hard to keep a phone for 7 years, as the manufacturer believes. However, Pixel users will continue to rock with their smartphone, as Google could pledge 7 OS upgrades, that will arrive with new features and enhancements.