Samsung To Deliver Critical Security Patch For Millions Of Galaxy Devices

A major security vulnerability that was once thought to only affect Google's Pixel devices actually casts a wider net within the Android ecosystem. In response, Samsung is fast-tracking an update for millions of Galaxy devices, according to information the world's biggest smartphone player (in terms of market share) shared with Zak Doffman at Forbes.

The vulnerability in question is tracked as CVE-2024-32896 and is described as an elevation of privilege (EoP) flaw. Last month, Google issued a Pixel security bulletin saying the exploit "may be under limited, targeted exploitation," which in other words means that hackers are actively targeting affected devices. At the time, it was thought that only Pixel devices contained the flaw, but Google would later clarify that all Android devices are at risk.

That includes Galaxy handsets, and initially it was reported that a fix could take several months. However, Samsung apparently told Doffman that "the target scheduled for this fix is August," with the caveat that the actual roll out "may vary on network provider and device."

One reason this is notable is because Samsung is top of the smartphone food chain. Recently updated auditing by multiple market research firms show Samsung edging out Apple for the largest share of the global smartphone market. According to IDC, Samsung shipped 53.9 million smartphones in the second quarter of 2024, to claim 18.9% of the market. Canalys shared a similar stat last week, pegging Samsung's share at 18%.

As to the vulnerability that's been fast-tracked for a fix, there are still no fine grain details. That's not unusual, as vendors like Google typically wait until a majority of affected users have access to a fix before spilling the beans, so as to keep hackers in the dark as long as possible.

Incidentally, there was a second and potentially more serious vulnerability tracked as CVE-2024-29745 that Google fixed for its Pixel devices. Likewise, it also affects the Android platform as a whole. Samsung has not said if its upcoming patch for Galaxy phones will address that one as well.