Samsung Galaxy S3, Galaxy Note 2 and others hit by security flaw
Posted on 17 Dec 2012 at 10:17, by Gareth Halfacree
Samsung's Galaxy S3 and Galaxy Note 2 smartphones have been revealed to suffer from a security flaw found in their Exynos ARM-based system-on-chip (SoC) processors, which could lead to users' personal data being exposed to malware.
First spotted by a user on the XDA Developers forums, the flaw affects all Android-based Samsung devices that use the Exynos 4210 and 4412 system-on-chip processor - including the Galaxy S2, Galaxy S3, Galaxy Note, Galaxy Note 2 and Galaxy Note 10.1, but not the cut-down Galaxy S3 Mini, which uses a different processor. The Samsung-manufactured Nexus 10 tablet, meanwhile, also escapes the bug as it uses the next-generation Exynos 5-series processor rather than the Exynos 4 family.
Currently, the flaw is not known to be exploited in the wild except for an application designed to allow users to 'root' their handsets - a process analogous to 'jailbreaking' an iPhone - without the need to connect the handset to a computer and use third-party software. The developer who discovered it, however, warns that it could be potentially serious: allowing full read/write access to the device's memory, the flaw allows malware to read personal details - including usernames and passwords - or patch itself into other applications, such as to record telephone calls or text messages. The vulnerability could even be used to trigger the device's microphone or camera remotely.
So far, there is no news of an official patch from Samsung, with some researchers releasing a third-party unofficial patch to work around the flaw.
Find a review
- iPhone 6 pictured in concept renders based on current rumour round-up
- Leaked images show iOS 8 running on Apple iPhone 5s
- Samsung Galaxy K Zoom cameraphone pictured ahead of official reveal
- iOS 8 release date, screenshots, features, news and rumours for new iPhone 6 and iPhone 5 operating system
- OnePlus One officially revealed, could challenge Nexus 5 for stock Android superiority
- LG G3 software leak suggests built-in fingerprint sensor
- NFC payments could power London travel
- Larger 5.5in iPhone 6 reportedly delayed until 2015
- Samsung Exynos 5430 processor with 2K display support, Intel LTE revealed
- Apple celebrates Earth Day with free product recycling