Samsung October 2024 Security Patch Details Arrived

It’s 8th October 2024 and Samsung has updated the details of the latest security patch for its Galaxy devices on its scope page. It contains CVE and SVE items to improve the security and stability of the device to provide a better and more secure experience.

Samsung has already begun releasing the October 2024 security patch and Galaxy S24 FE is the first smartphone to receive it. The company will add more devices soon to this update list.

October 2024 security update includes patches from both Google and Samsung, addressing various vulnerabilities and exposures in the Android operating system and Samsung’s software.

The Google patches cover up to the Android Security Bulletin – October 2024 package, which contains 2 critical level and 28 high-level CVEs. However, 1 CVE has already resolved by previous updates from the company, and 2 are not relevant to Galaxy devices.

On the flip side, the Samsung patches include 12 Samsung Vulnerabilities and Exposures (SVE) items, which are specific to Samsung’s devices and applications. It fixes issues related to system service, Knox services, and more.

Not only this, Samsung Semiconductor also adds a fix for 1 high-level CVE to enhance the performance.

Samsung October 2024 Security Patch Details

Android Patch Details

Critical

• CVE-2024-33042, CVE-2024-33052

High

• CVE-2024-3655, CVE-2024-31336, CVE-2024-23716, CVE-2024-36972, CVE-2024-23365, CVE-2024-23362, CVE-2024-33016, CVE-2024-33045, CVE-2024-33054, CVE-2024-33038, CVE-2024-33035, CVE-2024-33034, CVE-2024-33060, CVE-2024-23358, CVE-2024-23359, CVE-2024-23364, CVE-2024-33051, CVE-2024-33057, CVE-2024-33050, CVE-2024-33048, CVE-2024-33043, CVE-2024-0044, CVE-2024-40676, CVE-2024-40675, CVE-2024-40673, CVE-2024-40672, CVE-2024-40677, CVE-2024-40674

Moderate

• None

Already included in previous updates

• CVE-2024-20017

Not applicable to Samsung devices

• CVE-2024-39432, CVE-2024-39431

Samsung Semiconductor

High

• CVE-2024-44068

One UI Patch Details

• SVE-2024-0766(CVE-2024-34662): Improper access control in ActivityManager
• SVE-2024-1247(CVE-2024-34663): Integer overflow in libSEF.quram.so
• SVE-2024-1387(CVE-2024-34664): Improper check for exception conditions in Knox Guard
• SVE-2024-1490(CVE-2024-34665): Out-of-bounds write in librtppayload.so
• SVE-2024-1492(CVE-2024-34666): Out-of-bounds write in librtppayload.so
• SVE-2024-1494(CVE-2024-34667): Out-of-bounds write in librtppayload.so
• SVE-2024-1495(CVE-2024-34668): Out-of-bounds write in librtppayload.so
• SVE-2024-1496(CVE-2024-34669): Out-of-bounds write in librtppayload.so