Samsung
Samsung’s November 2023 patch addresses 48 Android CVEs, 15 One UI SVEs
Following the November 2023 Android 14 patch rollout, Samsung released details of the One UI patch for Galaxy consumers. The company mentioned various CVEs and SVEs that will sequentially roll out to several Galaxy devices across the world.
Galaxy’s November 2023 One UI patch includes patches from Google and Samsung. In particular, your Galaxy device’s latest software update addresses 48 CVEs related to the Android operating system, 15 SVEs related to One UI software, and 2 CVEs related to Samsung Semiconductor.
Follow our socials → Google News | Telegram | X/Twitter | Facebook | WhatsApp
Samsung is rolling out the maintenance release for major flagship and select Galaxy A/M/F models as part of monthly/quarterly/biannual security maintenance releases. You can check the details of CVEs, SVEs, and Semiconductor patches below.
Google patches include patches up to the Android Security Bulletin – November 2023 package. The Bulletin (November 2023) contains the following CVE items:
Critical / 5
- CVE-2023-24855, CVE-2023-28540, CVE-2023-33028, CVE-2023-4863, CVE-2023-40113
High / 43
- CVE-2020-29374, CVE-2023-21673, CVE-2023-22385, CVE-2023-24843, CVE-2023-24844, CVE-2023-24848, CVE-2023-24847, CVE-2023-24850, CVE-2023-24849, CVE-2023-24853, CVE-2023-34970, CVE-2023-33200, CVE-2023-33034, CVE-2023-33035,
- CVE-2023-33027, CVE-2023-33029, CVE-2023-33026, CVE-2023-4211, CVE-2023-20819, CVE-2023-32819, CVE-2023-32820, CVE-2021-44828, CVE-2022-28348, CVE-2023-40638, CVE-2023-40106, CVE-2023-40107, CVE-2023-40109, CVE-2023-40110, CVE-2023-40111,
- CVE-2023-40114, CVE-2023-40105, CVE-2023-40124, CVE-2023-40100, CVE-2023-40115, CVE-2023-40104, CVE-2023-40112, CVE-2023-21103, CVE-2023-21111, CVE-2023-21234, CVE-2023-33106, CVE-2023-33107, CVE-2022-22071, CVE-2023-33063.
Samsung Semiconductor patch is also included in this Security Maintenance Release with the following CVE item:
High / 2
- CVE-2023-41111, CVE-2023-41112
Along with Google patches and Samsung Semiconductor patches, Samsung Mobile provides 15 SVE items described below, to improve customer’s confidence in the security of Galaxy devices. Some of the SVE items may not be included in this package, in case of prior resolution.
High / 6
- SVE-2023-1439(CVE-2023-42538): An improper input validation in saped_rec_silence in libsaped
- SVE-2023-1437(CVE-2023-42537): An improper input validation in get_head_crc in libsaped
- SVE-2023-1434(CVE-2023-42536): An improper input validation in saped_dec in libsaped
- SVE-2023-1396(CVE-2023-42533): Improper Input Validation with USB Gadget Interface
- SVE-2023-1365(CVE-2023-42532): Improper Certificate Validation in FotaAgent
- SVE-2023-1363(CVE-2023-42535): Out-of-bounds Write in read_block of vold
- SVE-2023-0541(CVE-2023-42529): Out-of-bound write in libsec-ril
- SVE-2023-0539(CVE-2023-42528): Heap Overflow in ProcessNvBuffering of libsec-ril
- SVE-2023-0538(CVE-2023-42527): Improper input validation in ProcessWriteFile of libsec-ril
- SVE-2023-0537(CVE-2023-30739): Arbitrary File Descriptor Write in libsec-ril
Moderate
- SVE-2023-1031(CVE-2023-42531): Improper access control vulnerability in SmsController
- SVE-2023-0987(CVE-2023-42530): Improper access control vulnerability in SecSettings
- SVE-2023-0611(CVE-2023-42534): Improper input validation vulnerability in ChooserActivity
// Samsung
Samsung started mass production of 1TB QLC 9th-gen V-NAND semiconductor to gain an edge in the AI era. This achievement suggests Samsung is solidifying its leadership in the high-capacity, high-performance NAND flash market.
As the enterprise SSD market shows rapid growth with stronger demand for AI applications, Samsung will continue to solidify its leadership in the segment through our QLC and TLC 9th-gen V-NAND.
The South Korean tech giant plans to expand applications of the QLC 9th-generation V-NAND, starting with branded consumer products and extending into mobile Universal Flash Storage (UFS), PCs and server SSDs for customers.
Samsung’s QLC 9th-gen V-NAND brings several innovations. The area of the cells and the peripheral circuits have been optimized via TLC 9th-gen V-NAND. Adopting Designed Mold has improved data retention performance by nearly 20%.
In addition, the company’s QLC 9th-gen V-NAND has doubled write performance and improved data input/output speed by 60%. Data read and write power consumption decreased by about 30% and 50% respectively.
Summary:
The latest QLC V-NAND combines several breakthrough technologies, including Channel Hole Etching which enables the highest layer count in the industry with a double stack structure. Industry-first QLC and TLC 9th-gen V-NAND delivers optimum memory across various AI applications.
Galaxy A16 would be the most selling Samsung phone in 2025. It’s anticipated to lead the Android smartphone market throughout the next year. Ahead of the December debut, the Galaxy A16 design was revealed in leaked renders.
Samsung is expected to launch the Galaxy A16 in December this year. As revealed in renders, the device will have three rear cameras, a key island, and an Infinity-U display. The phone continues to flaunt Samsung’s signature design language.
Interestingly, the phone’s left side holds the SIM card slot. At the same time, the right side carries volume buttons and a power key that doubles as a fingerprint scanner. The bezles look fine-tuned while the chin is extremely thick.
The Galaxy A16 could be available in two different chips – Dimensity 6300 (SM-A166P) and Exynos 1330 (SM-A166E) – probably following market needs. It will be powered by a 5000mAh battery, supporting 25W wired charging.
Samsung has recently launched the Galaxy A06 smartphone. Chinese phone makers harmed Samsung’s market in key countries. However, the company is now aggressively targeting the entry-level and mid-range market.
We are seeing fruitful upgrades in newly released and upcoming entry-level handsets. The decision aligns with a long-term strategy to maintain an edge across segments. That said Galaxy A16 is all set to lead the Android smartphone market next year.
Apart from hardware, the Korean tech giant is also improving the One UI. Software experience remains a controversial point in Samsung’s non-flagship phones. However, the One UI Core is getting improved with time – following user feedback.
Samsung Galaxy S23, Galaxy S23 Plus, and Galaxy S23 Ultra users in South Korea have recently received a major One UI 6.1 (based on One UI 6.1.1) update. Though the exact dates are not clear, One UI 6.1.1 update for the Galaxy S23 series will soon be available in more countries.
According to the information, One UI 6.1.1 is expected to make its way to additional countries within the next week. While the exact timeline for the wider rollout has not yet been disclosed, the update is expected to be available in more countries next week.
One UI 6.1.1 update brings Galaxy AI’s Sketch Conversion for turning drawings into artwork and Portrait Enhancements for improved photo styles. Samsung Keyboard now features text auto-completion, while real-time translation is available for calls and text in images.
The update also includes voice-to-text conversion, better PDF management, and dynamic wallpapers that change with weather and time. It installs the Android security patch to improve system security.
At the moment, Samsung Galaxy S23 users can enjoy these new features on their devices. Users in other regions can look forward to receiving the update soon, as Samsung rolls out updates gradually.
Aside from this, the Korean tech giant has also released One UI 6.1.1 update to Galaxy S23 FE, Galaxy Z Fold 5, Galaxy Z Flip 5, and Galaxy Tab S9 series in Korea. The company will soon expand this major update to these devices in more countries.
One UI 6.1.1 update for Galaxy S23 rolling out with new AI features