Updates
September 2022 SMR fixes these bugs on Samsung devices
Samsung has now officially published the September 2022 security patch details for Galaxy devices, detailing which bugs, CVEs and SVEs are going to get fixes. The company is bringing a maintenance release for flagship Galaxy devices as part of the monthly Security Maintenance Release (SMR) process.
In addition to CVE fixes from Google, the September 2022 update includes various SVE items from Samsung as well. The company detailed which Android OS bugs (CVEs) and One UI bugs (SVEs) will be fixed with the latest security updates throughout the month.
Join Sammy Fans on Telegram
September SMR CVE Items
Samsung’s September 2022 security update for Galaxy devices comes with 21 high levels, and 3 moderate levels of CVEs. At the same time, there is no critical level of CVE mentioned on the list by the company, while, 2 CVEs are already fixed with previous updates and 4 aren’t applicable.
Follow Sammy Fans on Google News
Critical
- None
High
- CVE-2021-39815, CVE-2022-20122, CVE-2021-0947, CVE-2021-0946, CVE-2021-0698, CVE-2021-0887, CVE-2021-0891, CVE-2021-30259, CVE-2022-22062, CVE-2022-22070, CVE-2022-22067, CVE-2022-22822, CVE-2022-23852, CVE-2022-23990, CVE-2022-25314, CVE-2022-20218, CVE-2022-20392, CVE-2022-20393, CVE-2022-20395, CVE-2022-20398, CVE-2022-20396
Moderate
- CVE-2022-20197, CVE-2020-0500, CVE-2020-0293
Already included in previous updates
- CVE-2022-22080, CVE-2022-20239
Not applicable to Samsung devices
- CVE-2022-22061, CVE-2022-22069, CVE-2022-22059, CVE-2022-25668
September SMR SVE Items
Apart from CVE items from Google, the South Korean tech giant additionally included 29 Samsung Vulnerabilities and Exposures (SVE) items to improve its customers’ confidence in the security of Galaxy phones and tablets. You can check the SVE list below.
SVE-2022-1254(CVE-2022-36847):
- Use after free vulnerability in mtp_send_signal function of MTP driver
SVE-2022-1249(CVE-2022-36849):
- Use after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver
SVE-2022-1086(CVE-2022-36845), SVE-2022-1083(CVE-2022-36841), SVE-2022-1082(CVE-2022-36844), SVE-2022-1081(CVE-2022-36843), SVE-2022-1080(CVE-2022-36860), SVE-2022-1079(CVE-2022-36863), SVE-2022-1077(CVE-2022-36862), SVE-2022-1076(CVE-2022-36842), SVE-2022-1075(CVE-2022-36846), SVE-2022-1074(CVE-2022-36858)
- A heap-based overflow vulnerability in libSDKRecognitionText.spensdk.samsung.so library
SVE-2022-1037(CVE-2022-36854):
- Out of bound read in libapexjni.media.samsung.so
SVE-2022-0934(CVE-2022-36848):
- Improper Authorization vulnerability in setDualDARPolicyCmd
SVE-2022-0899(CVE-2022-36852):
- Improper Authorization vulnerability in Video Editor
SVE-2022-0853(CVE-2022-36861):
- Custom permission misuse in SystemUI
SVE-2022-0815(CVE-2022-36853):
- Intent redirection in Photo Editor
SVE-2022-0803(CVE-2022-36856):
- Improper access control vulnerability in Telecom application
SVE-2022-0706(CVE-2022-36857):
- Improper Authorization vulnerability in Photo Editor
SVE-2022-0702(CVE-2022-36850):
- Path traversal vulnerability in CallBGProvider
SVE-2022-0619(CVE-2022-36855):
- Use After Free vulnerability in iva_ctl driver
Samsung mentioned that some SVE items included in the Samsung Android Security Update cannot be disclosed at this time.
Samsung has pushed the October 2024 security update for Galaxy Z Flip 3 and Galaxy Z Fold 3 smartphones in the US. This update installs the latest Android security patch to improve system security and stability.
The fresh update is currently rolling out to locked models of Galaxy Z Flip 3 and Galaxy Z Fold 3 in the US and other carriers could get this update in the coming days or weeks. It is an initial rollout so it may take days to reach all models.
October 2024 security update for Samsung Galaxy Z Flip 3 and Galaxy Z Fold 3 in the US can identify the latest update via One UI builds given below.
- Galaxy Z Fold 3 – F926USQS8JXJ1
- Galaxy Z Flip 3 – F711USQS9JXJ1
This latest update enhances system security and stability, ultimately improving overall app performance. It addresses several issues that users experienced with the previous version to ensure a smoother and more reliable device experience.
Notably, the October 2024 security patch resolves over 40 vulnerabilities, including 2 critical and 28 high-level Common Vulnerabilities and Exposures (CVEs) identified by Google. Additionally, Samsung has addressed 12 Samsung Vulnerabilities and Exposures (SVE) items, focusing on issues related to system services, Knox services, and other critical things.
Users can easily check and install the update via a few easy steps. Navigate to Settings >> Open the Software Update section from the menu >> Click on the Download and Install option to initiate the update process. If the update is available, proceed to install it.
Samsung Galaxy A14 5G smartphone users are getting a fresh update with the October 2024 security patch in the US. The update is available for locked variants of this smartphone on the Verizon network carrier and the company will expand it soon to more countries.
The October 2024 security patch is rolling out with some important fixes from Google and Samsung. Google has patched 2 critical and 28 high-level issues, 1 was already resolved and 2 don’t apply to Galaxy devices.
On Samsung’s end, there are 12 fixes for vulnerabilities in system services and Knox. In addition, Samsung Semiconductor also added a fix to improve performance. Beyond security enhancements, the update also enhances stability and some functions to provide a better Galaxy experience.
Users of the Samsung Galaxy A14 5G can verify the October 2024 security update via the One UI build version A146USQS9DXI2 in the US. It is an initial rollout so it may take some hours or days to reach all models.
To access the latest update on your Samsung Galaxy A14 5G, go to the Settings app, tap on Software Update, and then select Download and Install. This will initiate the update process, and once completed, you’ll enjoy an enhanced and efficient smartphone experience.
Samsung has finally started releasing the October 2024 security update for the Galaxy S21 series. The update is rolling out for locked models on the Verizon network carrier in the US and the company will soon make it available in more countries.
Users of the Samsung Galaxy S21, Galaxy S21 Plus, and Galaxy S21 Ultra can identify the October 2024 security update through One UI build version G991USQSDGXJ2, G996USQSDGXJ2, and G998USQSDGXJ2 respectively.
The fresh update improves system security and stability to provide a better Galaxy experience. It also fixes over 40 security issues to boost your phone’s performance.
Notably, the October 2024 security patch brings important fixes from both Google and Samsung, targeting vulnerabilities in the Android operating system and Samsung’s software. Google addresses 2 critical and 28 high-level issues, with 1 previously resolved and 2 not affecting Galaxy devices.
Meanwhile, Samsung fixes 12 specific vulnerabilities related to system services and Knox security. Additionally, Samsung Semiconductor has enhanced performance with a fix for 1 high-level issue.
It’s important to install updates as soon as possible to take advantage of these security improvements. Samsung will soon make this update available for all S21 models.
If you haven’t received a notification for the update, you can manually check for it. Just go to your phone’s Settings, select ‘Software Update,’ and then tap ‘Download and install’ to keep your Galaxy smartphone current with the latest security.
Galaxy S24’s AI Camera Shift feature now available on these Samsung devices