Several zero days are plaguing Android devices with Samsung chips, warns Google

Google is warning that some Samsung-powered Android (opens in new tab) devices are suffering from high-severity vulnerabilities which allow threat actors to compromise the endpoints remotely without user interaction.

In a blog post (opens in new tab) published on the Project Zero website earlier this week, Google’s researchers said that they reported 18 zero-day vulnerabilities found in Samsung’s Exynos Modems in late 2022 and early 2023. Of those 18, four are high-severity, allowing for internet-to-baseband remote code execution.

With many organizations relying on mobile devices power their workforce, financially-motivated hackers, as well as state-sponsored threat actors from China and Russia, for example, will seek to exploit these flaws in malicious campaigns of data theft and espionage.

No user interaction required

“Tests conducted by Project Zero confirm that those four vulnerabilities allow an attacker to remotely compromise a phone at the baseband level with no user interaction, and require ...