Samsung has announced that a critical update for Galaxy devices is set to be released in August. This update is of utmost importance and users are advised to install it as soon as it becomes available for their specific model, region, and carrier.
The update is in response to a Pixel zero-day vulnerability that came to light in June. Initially thought to only affect Pixel devices, it was later revealed that the vulnerability also impacts all Android devices, including Samsung phones. Google acknowledged that the vulnerability had been exploited in the wild, prompting urgent action to address the issue.
While it was initially estimated that a fix for this vulnerability could take several months, Samsung has now expedited the process, with the target schedule for the fix set for August. However, the availability of the update may vary depending on the network provider and device.
The vulnerability, identified as CVE-2024-32896, is part of a larger threat that was first reported in April and is actively being exploited by forensic companies. Another critical vulnerability, CVE-2024-29745, which has only been fixed for Pixel devices so far, also poses a risk to other Android devices. This vulnerability affects OEM firmware and requires individual manufacturers to address it.
Google has confirmed that the second vulnerability impacts a wide range of Android devices beyond just Pixels, although it would need to be combined with other exploits to pose a significant threat. Samsung has been commended for their prompt response in addressing these vulnerabilities, especially considering the urgency highlighted by the US government.
Users are strongly advised to ensure that they install the August update as soon as it is available to protect their devices from potential security risks. Stay informed and prioritize your device's security by staying up to date with the latest updates from Samsung.