These are the two most common Samsung vulnerabilities on 220 million devices

Samsung does a great job of sending out security updates every month to plug vulnerabilities that could put user data at risk. The company recently pulled back the curtain on the secretive team that works behind the scenes to keep our devices safe.

A security research firm recently put out a report based on analysis of over 220 million devices and 360 million apps that found two specific Samsung vulnerabilities as being the most common in this data set.

Samsung's monthly security updates are a blessing

Vulnerabilities in mobile apps can be harmful to you in many different ways. For example, they may allow attackers to install compromised apps without you knowing, aid in the theft of personal data, and spread malware. These are some of the most widely occurring security risks on mobile devices other than browser vulnerabilities.

Security firm Lookout highlighted in its Q3 2024 report that CVE-2023-21433-21434 was the most common vulnerability found on Samsung devices. This security risk was present in the Galaxy Store. It allowed attackers to use an already installed app on the device to install a compromised app on the device without the user finding out.

They could even run JavaScript by launching a web page. Fortunately, the door was shut on this vulnerability with the Android 13 One UI 5.0 update and no subsequent devices are at any risk. The second vulnerability, CVE-2021-25337, was found in the Samsung Text-to-Speech app. It let attackers have privileged access to Android OS and even run code. This vulnerability has long been fixed as well.

It's a constant game of cat and mouse between Samsung's security team and bad actors who wish to exploit any weaknesses in its devices. It goes without saying that users should never prolong updating their devices to the latest security update as soon as it arrives. Samsung sends them out for a reason, to protect you and your information, and with even more potent threats lurking in shadows, one can't afford to be cavalier about updates.