Samsung phones exposed to major vulnerabilities running Android 9 to 12 are in danger

     Security firm Kryptowire has warned that various Samsung devices are vulnerable to a major security vulnerability that could allow hackers to take over the devices.

　　Kryptowire makes Mobile Application Security Testing (MAST), a tool that scans for vulnerabilities and security and privacy issues.

　　According to the company, it discovered a vulnerability (CVE-2022-22292) that could allow hackers to take a range of actions, including making phone calls, installing/uninstalling apps, weakening HTTPS security by installing unverified certificates, running in the background, and even performing a factory reset.

　　The vulnerability appears to affect almost all Samsung smartphones running Android 9 to 12, due to the pre-installed Phone app having an "insecure component." Because the Phone app runs with system privileges, this opens an attack vector for bad actors. Malicious apps can exploit the Phone vulnerability to "mimic system-level activities" and access features that should be protected.

　　Kryptowire first discovered the vulnerability and notified Samsung in November 2021. The company released a fix in February 2022, encouraging all Samsung users to update immediately to ensure their phones are secure.