Here's how to safeguard yourself after experts found a very serious security flaw in Samsung Galaxy phones
Samsung is a brand that has always been known for its security and high quality, being at the top of Android phones, competing with Xiaomi, Huawei, and other companies.
Despite efforts to combat digital threats, cybercriminals find ways to exploit vulnerabilities in the system, and this time they have succeeded with Samsung Galaxy phones.
The security flaw appears to stem from a voice decoder that hackers use to place malicious code on devices once users send a text message.
The situation is serious and could affect many users if immediate action is not taken, so it is very important that you know how this new method works so that you do not fall prey to attacks.
The News Hacker, a cybersecurity website, has confirmed that Samsung is battling a new security vulnerability that could lead to hacking methods.
This is a bug in Audio Monkey Decoder (APE), an algorithm that processes audio formats on devices.
According to the report, the affected smartphones will be all those running Android 12, Android 13, and Android 14 operating systems.
The flaw has been registered as "CVE-2024-49415" because it is considered an entry point for executing arbitrary code within devices.
Google Project Zero had previously reported on this vulnerability, with specialist Natalie Silvanovich saying that the flaw could lead to different ways to access Samsung phones via malware or direct attacks.
How is this possible? The attacker can then send a voice message via a messaging app to the victim who has RCS enabled. Once the audio file is opened, the decryption software allows the hacker to implant malicious code into “samsung.software.media.c2”.
Therefore, to avoid these attacks, it is important to disable the RCS option that is enabled by default on devices like the Galaxy S23 and S24. Additionally, it would not be a good idea to open audio files from unknown contacts.
The good news is that Samsung has announced that they are working on a security patch soon. So just follow the instructions and wait for the system to update.