Skip Navigation

Cybersecurity @sh.itjust.works

Kid @sh.itjust.works

9mo ago

Samsung Zero-Day Vuln Under Active Exploit, Google Warns

www.darkreading.com

Samsung Zero-Day Vuln Under Active Exploit, Google Warns

19 comments

Here's the scope of it
A National Institute of Standards and Technology (NIST) advisory on the bug describes it as "an issue [that] was discovered in the m2m scaler driver in Samsung Mobile Processor and Wearable Processor Exynos 9820, 9825, 980, 990, 850, and W920." A use-after-free bug in the mobile processor ultimately leads to privilege escalation, the agency added.
- Its a good thing people already knew Exynos sucks. Made me steer well clear of those chips.
- Looks like they're mainly used in Galaxy S phones and tables...
  
  The bootloader is locked for your own good, boy!
Urrg! I have one of those CPUs. (Exynos 9820) I don't want to upgrade with an expensive new phone. I get no longer security updates.
- Ugh, I'm in the same boat. s10e, I have zero complaint other than the EOL security update. Bought it 2nd hand two years ago.
  There's nothing in the market with similar price with the spec and size of my current phone.
- Lineage might extend that life a little bit
  
  I'd try it, but this is essentially an emergency signalling device and not something I'd like to render inoperable.
- Pixel and grapheneos...
  About as good as normie can get currently
  Buy used to dent google direct profit and it is cheaper
  
  Pixel phones can have hardware quality issues. Samsung arguably makes the best hardware. Their cameras and screens have always been way ahead of every other phone.
  
  My banking app sadly doesn't work on a rooted phone.

19 comments