One UI

Samsung February 2024 Security Patch Details Out: What’s New

Published

10 months ago

on

Samsung has revealed the details of the February 2024 security patch for its Galaxy devices. It contains CVE and SVE items to improve the security and stability of the device to provide a better and more secure experience.

The update includes patches from both Google and Samsung, addressing various vulnerabilities and exposures in the Android operating system and Samsung’s software.

Follow our socials → Google News | Telegram | X/Twitter | Facebook | WhatsApp

The Google patches cover up to the Android Security Bulletin – February 2024 package, which contains 79 CVE items, of which 3 are leveled as critical and 76 as high. On the other side, the Samsung patches include eight Samsung Vulnerabilities and Exposures (SVE) items, which are specific to Samsung’s devices and applications.

Android Patch Details

Critical

  • CVE-2023-21651, CVE-2023-33025, CVE-2024-0031

High

  • CVE-2023-33042, CVE-2023-33043, CVE-2023-33044, CVE-2023-4295, CVE-2023-5427, CVE-2023-21165, CVE-2023-32872, CVE-2023-33033, CVE-2023-33037, CVE-2023-33030, CVE-2023-33032, CVE-2023-33014, CVE-2023-33040, CVE-2023-28567, CVE-2023-28565, CVE-2023-28564, CVE-2023-28548, CVE-2023-28544, CVE-2023-28558, CVE-2023-28559, CVE-2022-33275, CVE-2023-28560, CVE-2023-28557, CVE-2023-33112, CVE-2023-43511, CVE-2023-33062, CVE-2023-33109, CVE-2023-33117, CVE-2023-33110, CVE-2023-33120, CVE-2023-33094, CVE-2023-33114, CVE-2023-33113, CVE-2023-43514, CVE-2023-48352, CVE-2023-48351, CVE-2023-48349, CVE-2023-48350, CVE-2023-48348, CVE-2023-48344, CVE-2023-48342, CVE-2023-48341, CVE-2023-48343, CVE-2023-48340, CVE-2024-0029, CVE-2024-0032, CVE-2024-0034, CVE-2024-0036, CVE-2024-0038, CVE-2024-0041, CVE-2023-40122, CVE-2024-0037, CVE-2024-0040, CVE-2024-0014, CVE-2024-0033, CVE-2024-0035, CVE-2023-40093, CVE-2024-0030

Moderate

  • None

Already included in previous updates

  • CVE-2023-33036, CVE-2023-33108

Not applicable to Samsung devices

  • CVE-2023-32874, CVE-2023-33085

One UI Patch Details

  • SVE-2023-1449(CVE-2024-20810): Implicit intent hijacking vulnerability in Smart Suggestions
  • SVE-2023-1548(CVE-2024-20811): Improper caller verification in GosSystemService
  • SVE-2023-1609(CVE-2024-20812): Out-of-bounds Write in padmd_vld_htbl of libpadm.so
  • SVE-2023-1610(CVE-2024-20813): Out-of-bounds Write in padmd_vld_qtbl of libpadm.so
  • SVE-2023-1674(CVE-2024-20814): Out-of-bounds Read in padmd_vld_ac_prog_refine of libpadm.so
  • SVE-2023-1685(CVE-2024-20816, CVE-2024-20815): Improper authentication vulnerability in Auto Hotspot
  • SVE-2023-1754(CVE-2024-20819, CVE-2024-20818, CVE-2024-20817): Out of bounds Write vulnerabilities in libsthmbc.so
  • SVE-2023-2215(CVE-2024-20820): Out-of-bounds read vulnerability in bootloader
Related Topics:
Exit mobile version