Samsung confirms Exynos vulnerability, promises fix
updated 11:46 am EST, Wed December 19, 2012
Galaxy S II, S III affected by security bug
Samsung has confirmed recent reports of a security vulnerability that affects Exynos-equipped handsets, such as the Galaxy S II, Galaxy S III and Galaxy Note II. In a statement issued to AndroidCentral, the company acknowledged the "potential security issue" relating to the Exynos processor and promises to release a software patch, however a release timeframe has yet to be announced.
"The issue may arise only when a malicious application is operated on the affected devices; however, this does not affect most devices operating credible and authenticated applications," the statement reads. "Samsung will continue to closely monitor the situation until the software fix has been made available to all affected mobile devices."
An XDA Developers forum post suggests the issue leaves devices powered by Samsung's Exynos 4 processor vulnerable to malicious apps, which are said to be potentially capable of wiping data, accessing private data without authorization, or changing settings to disable the device.
The vulnerability is not yet believed to have been exploited in any malicious apps.
