Vulnerabilities in Samsung modems could lead to loss of control over devices

Google internal team Project Zero found 18 vulnerabilities in Samsung Exynos modems, which are used in Pixel 6 and 7 smartphones, as well as in many Samsung models (including the flagship S22), Vivo and smart watches. Project Zero claims that these shortcomings can be protected by turning off calls over Wi-Fi and Voice-over-LTE (VoLTE).

Thanks to four identified weaknesses, attackers can remotely and discreetly gain access to a smartphone and some of its basic functions – for this they only need to know the user’s phone number. Another 14 vulnerabilities can be triggered by local access to the device or errors of the mobile operator.

The problems concern the Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080 and Exynos Auto T5123 modems. Some Pixel phones have already received protection from these vulnerabilities thanks to a patch released in March.

Evgeny Fedunenko