Samsung plans to fix a potential security risk for a number of Android smartphones that feature specific Samsung-made Exynos processors.
The security exploit, first uncovered earlier in the week, opens the door for hackers and other ne’er-do-wells to take control of the system RAM and root the device. Once rooted, the phone or tablet would be susceptible to a variety of malicious activities, such as installing additional apps.
Related stories:
- Multiple Samsung devices found susceptible to remote wipe hack
- Should malware risks factor into the iPhone vs. Android debate?
- iPhone 4S, Samsung Galaxy S3 hacked in contest
Thus far, only the Exynos 4210 and 4412 processors were found to be vulnerable to the one-click rooting; however, there are quite a few Samsung products that fall under this umbrella. Affected models were found to include select Galaxy S 2 models, the Galaxy Note, the Galaxy Note 2, and the Galaxy Tab 2 tablet.
Also at risk are the Galaxy Note 10.1 tablet, and even the new Samsung Galaxy Camera.
As of now, there are no known apps in circulation that will take advantage of the hole, but, as XDA member “alephzain” explains, it’s a potentially scary situation.
Samsung confirmed to AndroidCentral that a fix is currently under way and that a software update will roll out “as quickly as possible.”
Samsung is aware of the potential security issue related to the Exynos processor and plans to provide a software update to address it as quickly as possible.
The issue may arise only when a malicious application is operated on the affected devices; however, this does not affect most devices operating credible and authenticated applications.
Samsung will continue to closely monitor the situation until the software fix has been made available to all affected mobile devices.
In the interim, those who wish to take precautions against the security exploit can find a step-by-step tutorial at Project Voodoo. It is not a perfect fix, to be sure, but it should provide peace of mind for some.
CNET has asked Samsung for comment and will update this post with any additional information.