A few days ago, Samsung started rolling out the November 2021 security patch. However, the company had not revealed exactly which vulnerabilities it fixed with the latest security patch. Earlier today, the company updated its website and published details related to the November 2021 security update.
As a part of the South Korean firm's monthly Security Maintenance Release (SMR) process, the company has fixed dozens of vulnerabilities. It includes fixes from Google for three critical vulnerabilities, 20 high-risk vulnerabilities, and two moderate-risk vulnerabilities. The update also includes fixes for 13 vulnerabilities (one high-risk vulnerability, one critical vulnerability, and two moderate-risk vulnerabilities) found in Galaxy smartphones and tablets.
Samsung mentioned that 15 vulnerabilities that Google fixed with its November 2021 security patch were already included in Samsung's October 2021 update. The update also includes 17 bug fixes that do not apply to Samsung devices.
The company mentioned that it fixed a high-severity bug that stored sensitive information insecurely in Property Settings and allowed attackers to read ESN values without privilege. It also fixes bugs caused by missing or improper input validations in HDCP and HDCP LDFW, allowing attackers to overwrite TZASC allowing TEE compromise or run arbitrary code execution.
The new security patch fixes it by proper input validation in HDCP LDFW and removing legacy code in HDCP. You can read more about SVEs (Samsung Vulnerabilities and Exposures) included in this update on Samsung's dedicated webpage.
This new security patch has been released to the Galaxy S21, Galaxy S20, Galaxy S10, Galaxy A32, and the Galaxy A32 5G. More Galaxy smartphones and tablets will get this update over the next few weeks. You can manually check whether your device has up-to-date security using our custom tool.
Join SamMobile's Telegram group and subscribe to our YouTube channel to get instant news updates and in-depth reviews of Samsung devices. You can also subscribe to get updates from us on Google News and follow us on Twitter.
