# MA-1003.122023: MyCERT Advisory - Samsung Mobile Release Security Updates for Major of Samsung’s Flagship Mobile Devices

**Date:** 21 Dec 2023  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1003.122023  
**Advisory ID:** MA-1003.122023

---

**1.0 Introduction**
Recently, multiple vulnerabilities have been reported in Samsung products. The vulnerability could allow an attacker to bypass implemented security restrictions, access sensitive information and execute arbitrary code on the targeted system.
**2.0 Impact**
Attackers could take control of affected devices and perform the following unauthorised activities:
1. Steal the phone’s secret code (SIM PIN).
2. Shout load commands to the phone (broadcast with elevated privilege).
3. Peek into private AR Emoji files.
4. Change the clock on the castle gate (Knox Guard lock).
5. Snoop around the phone’s files (access arbitrary files).
6. Steal the sensitive information.
7. Control the phone by executing arbitrary code.
8. Compromise the phone and take full control of the phone.
**3.0 Affected Products**
Samsung Mobile with Android versions 11, 12, 13, 14.
**4.0 Recommendations**
Samsung Mobile has released a maintenance release for major flagship models as part of the monthly Security Maintenance Release (SMR) process.  This release consists of the following CVEs:
<https://security.samsungmobile.com/securityUpdate.smsb>
To check the current security patch installed, please follow the steps below:
Android 11 onwards:
1. Settings => About Phone => Software Information => System update, or
2. Settings => Software Update => Download and Install
\* Please note that the manufacturer may have relocated this information somewhere else.
Generally, we advise users and administrators to review the Samsung Mobile Security Update Guide and apply the necessary updates. Kindly refer to the URL mentioned above for more information.
Users of these devices are advised to be up-to-date with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact us through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
1. <https://security.samsungmobile.com/securityUpdate.smsb>
2. <https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0360>
3. <https://source.android.com/docs/security/bulletin/2023-12-01>
4. <https://timesofindia.indiatimes.com/gadgets-news/government-has-warning-for-galaxy-s23-other-samsung-smartphone-users/articleshow/105997045.cms>
5. <https://www.ndtv.com/feature/government-issues-high-risk-alert-for-samsung-mobile-phone-users-read-details-4676987>