Tag: security vulnerabilities

Samsung’s October security update comes with an unusual twist, offering five critical reasons for Galaxy phone owners running Android 12, 13, or 14 to update immediately. In the past, critical updates typically addressed broader Android vulnerabilities or hardware patches. While this month includes two such Qualcomm updates delayed from September, the focus now is on Samsung’s own vulnerabilities within its UI. The five vulnerabilities (CVEs) involve "librtppayload," a Samsung-specific system component. They allow remote attackers to execute arbitrary code with system privileges, although some level of user interaction is required, usually by tricking users into engaging with an on-screen exploit. Fortunately, no active exploits have been detected yet, but Galaxy users are strongly advi...