{"id":170638,"date":"2025-12-02T07:40:11","date_gmt":"2025-12-02T07:40:11","guid":{"rendered":"https:\/\/www.newsbeep.com\/ie\/170638\/"},"modified":"2025-12-02T07:40:11","modified_gmt":"2025-12-02T07:40:11","slug":"samsung-updates-all-galaxy-phones-google-warns-attacks-underway","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ie\/170638\/","title":{"rendered":"Samsung Updates All Galaxy Phones\u2014Google Warns Attacks Underway"},"content":{"rendered":"<p><img decoding=\"async\" class=\" top-image\" src=\"https:\/\/www.newsbeep.com\/ie\/wp-content\/uploads\/2025\/12\/1764661211_951_0x0.jpg\" alt=\"SAMSUNG phones on poster\" data-height=\"2072\" data-width=\"3145\" fetchpriority=\"high\" style=\"position:absolute;top:0\"\/><\/p>\n<p>This is an emergency update.<\/p>\n<p>Future Publishing via Getty Images<\/p>\n<p>Samsung has confirmed a critical update for all eligible Galaxy phones. Just hours after <a class=\"color-link\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/12\/01\/within-48-hours-google-issues-critical-update-for-all-android-users\/\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/12\/01\/within-48-hours-google-issues-critical-update-for-all-android-users\/\" target=\"_self\" aria-label=\"Google warned Android is under attack\" rel=\"nofollow noopener\">Google warned Android is under attack<\/a>, with new vulnerabilities <a class=\"color-link\" href=\"https:\/\/source.android.com\/docs\/security\/bulletin\/2025-12-01\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/source.android.com\/docs\/security\/bulletin\/2025-12-01\" aria-label=\"exploited in the wild\">exploited in the wild<\/a>, Samsung also rushed out details of its own updates \u2014 much earlier than expected.<\/p>\n<p>Google says CVE-2025-48633 and CVE-2025-48572 \u201cmay be under limited, targeted exploitation.\u201d Only the first of these is currently included in Samsung\u2019s update, but it may be the other is not relevant for its devices. We don\u2019t know as yet.<\/p>\n<p><a class=\"embed-base color-body color-body-border link-embed embed-0\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/12\/01\/fbi-warns-gmail-and-outlook-users-do-not-click\/\" target=\"_blank\" aria-label=\"FBI Warns Gmail And Outlook Users\u2014Do Not Click On These Emails\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/12\/01\/fbi-warns-gmail-and-outlook-users-do-not-click\/\" rel=\"nofollow noopener\">ForbesFBI Warns Gmail And Outlook Users\u2014Do Not Click On These EmailsBy Zak Doffman<\/a><\/p>\n<p>But while one of Google\u2019s Android fixes may be missing, Samsung\u2019s <a class=\"color-link\" href=\"https:\/\/security.samsungmobile.com\/securityUpdate.smsb\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/security.samsungmobile.com\/securityUpdate.smsb\" aria-label=\"monthly update\">monthly update<\/a> includes three critical security patches found by <a class=\"color-link\" href=\"https:\/\/googleprojectzero.blogspot.com\/p\/about-project-zero.html\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/googleprojectzero.blogspot.com\/p\/about-project-zero.html\" aria-label=\"Google\u2019s Project Zero\">Google\u2019s Project Zero<\/a>. <\/p>\n<p>That team\u2019s remit is to \u201cstudy zero-day vulnerabilities in the hardware and software systems that are depended upon by users around the world.\u201d That should focus Galaxy minds. Given both the Android and Samsung zero-days, this is an emergency update.<\/p>\n<p>The Android update affects the operating system\u2019s framework, and risks \u201cremote denial of service with no additional execution privileges needed.\u201d There are no further details as yet, and there won\u2019t be until most phones have been updated.<\/p>\n<p><a class=\"embed-base color-body color-body-border link-embed embed-1\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/12\/01\/iphone-and-android-vpn-ban-is-suddenly-real-do-this-instead\/\" target=\"_blank\" aria-label=\"\u2018Disaster\u2019\u2014iPhone And Android VPN Ban \u2018Actually Happening\u2019\" data-ga-track=\"forbesEmbedly:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/12\/01\/iphone-and-android-vpn-ban-is-suddenly-real-do-this-instead\/\" rel=\"nofollow noopener\">Forbes\u2018Disaster\u2019\u2014iPhone And Android VPN Ban \u2018Actually Happening\u2019By Zak Doffman<\/a><\/p>\n<p>It\u2019s the same story with Samsung\u2019s own update. All three of the vulnerabilities disclosed by Project Zero enable \u201cremote attackers to access out-of-bounds memory.\u201d Take this seriously. All affect the same libimagecodec.quram.so library, which prompted <a class=\"color-link\" href=\"https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/10\/08\/samsungs-emergency-update-for-all-galaxy-phones-new-warning\/\" data-ga-track=\"InternalLink:https:\/\/www.forbes.com\/sites\/zakdoffman\/2025\/10\/08\/samsungs-emergency-update-for-all-galaxy-phones-new-warning\/\" target=\"_self\" aria-label=\"Samsung\u2019s emergency update\" rel=\"nofollow noopener\">Samsung\u2019s emergency update<\/a> in October and a <a class=\"color-link\" href=\"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog\" target=\"_blank\" rel=\"nofollow noopener noreferrer\" data-ga-track=\"ExternalLink:https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog\" aria-label=\"U.S. government update warning\">U.S. government update warning<\/a>.<\/p>\n<p>As ever, Samsung\u2019s challenge now is the timing of updates for hundreds of millions of affected devices. Unlike Pixel, the Galaxy-maker can\u2019t update everyone, everywhere as soon as fixes are available. Users need to watch for the update on their phones.<\/p>\n","protected":false},"excerpt":{"rendered":"This is an emergency update. Future Publishing via Getty Images Samsung has confirmed a critical update for all&hellip;\n","protected":false},"author":2,"featured_media":170639,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[4970,61,60,94322,18877,60967,94321,4975,94323,80],"class_list":["post-170638","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-android-attack","tag-ie","tag-ireland","tag-samsung-attacks","tag-samsung-one-ui-8","tag-samsung-one-ui-8-5","tag-samsung-update-warning","tag-samsung-warning","tag-samsung-zero-day","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/170638","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/comments?post=170638"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/170638\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media\/170639"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media?parent=170638"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/categories?post=170638"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/tags?post=170638"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}