Research Finds 11 High-Impact Security Flaws on Galaxy S6 Edge

Research Finds 11 High-Impact Security Flaws on Galaxy S6 Edge

A team at Google tasked with discovering and exploiting severe bugs and exploits in Android recently turned their attention to the Samsung Galaxy S6 Edge smartphone. The team found “11 high-impact security issues” with the phone.

In just a week of research, the team attempted to find security flaws that could allow them access to contacts, photos, geolocation and other personal data, as well as the ability to remotely wipe the device. In total, they found 11 separate vulnerabilities. In particular, issues with Samsung’s own email client and gallery app created new security risks, in addition to security risks that were already inherent in the underlying Android operating system.

In other words, Android OEM software is adding security risks as well as unnecessary clutter and update delays to Android phones.

Fortunately, the biggest of the 11 flaws were able to be fixed within 90 days of their discovery and the three remaining pose lesser risks and will also be fixed in November. While the team has resolved the issues on the Galaxy S6 Edge, there’s no way they can achieve the same kind of research for the many thousands of other Android devices on the market.

For now, Google has committed to pushing out monthly Android security patches and if it finds the necessary cooperation from mobile carriers, it could make some progress on having a more security strategy.

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

  • Freedom of Choice

    In today's security landscape, we are witnessing a fundamental transformation in how organizations manage digital evidence. Law enforcement agencies, campus security teams, and large facility operators face increasingly complex challenges with expanding video data, tightening budget constraints and inflexible systems that limit innovation. Read Now

  • Accelerating a Pathway

    There is a new trend touting the transformational qualities of AI’s ability to deliver actionable data and predictive analysis that in many instances, seems to be a bit of an overpromise. The reality is that very few solutions in the cyber-physical security (CPS) space live up to this high expectation with the one exception being the new generation of Physical Identity and Access Management (PIAM) software – herein recategorized as PIAM+. Read Now

  • Protecting Your Zones

    It is game day. You can feel the crowd’s energy. In the parking lot. At the gate. In the stadium. On the concourse. Fans are eager to party. Food and merchandise vendors ready themselves for the rush. Read Now

  • Street Smarts

    The ongoing acceptance of AI and advanced data analytics has allowed surveillance camera technology to shift from being a tactical tool to a strategic business solution. Combining traditional surveillance technology with AI-based data-driven insights can streamline transportation systems, enhance traffic management, improve situational awareness, optimize resource allocation and streamline emergency response procedures. Read Now

  • Midtown Manhattan Shooting Kills 4, Including NYPD Officer

    Four people were killed, including a NYPD officer, in a midtown Manhattan shooting on Monday. That’s according to CNN. Read Now

New Products

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

  • FEP GameChanger

    FEP GameChanger

    Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction.

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities