Google researchers find 11 major security bugs in Samsung Galaxy S6 Edge

Posted on Wednesday, Nov 04 2015 @ 14:06 CET by Thomas De Maesschalck
Google logo
Google researchers took a look at Samsung's Galaxy S6 Edge as part of the search engine's Project Zero security effort that is tasked with finding zero-day exploits. HotHardware reports the researchers found a whopping 11 major security flaws in the smartphone. Samsung has already rolled out fixes for eight of the eleven vulnerabilities, the other three will be patched later this month.

Previously, Project Zero researchers investigated bugs on Google-made Nexus devices but now they turned to Samsung devices because the South Korean conglomerate is one of the biggest Android OEMs in the world. The eleven security flaws were found during a week-long competitive search:
The gave themselves a week to root out vulnerabilities, and to keep everyone sharp, the researchers made a contest out of it pitting the North American and European participants against each other.

Their efforts resulted in the discovery of 11 vulnerabilities, the "most interesting" of which was CVE-2015-7888. It's a directory traversal bug that allows a file to be written as a system. Project Zero said it was trivially exploitable, though it's also one of several that Samsung has since fixed.


About the Author

Thomas De Maesschalck

Thomas has been messing with computer since early childhood and firmly believes the Internet is the best thing since sliced bread. Enjoys playing with new tech, is fascinated by science, and passionate about financial markets. When not behind a computer, he can be found with running shoes on or lifting heavy weights in the weight room.



Loading Comments