Research Finds 11 High-Impact Security Flaws on Galaxy S6 Edge

Research Finds 11 High-Impact Security Flaws on Galaxy S6 Edge

A team at Google tasked with discovering and exploiting severe bugs and exploits in Android recently turned their attention to the Samsung Galaxy S6 Edge smartphone. The team found “11 high-impact security issues” with the phone.

In just a week of research, the team attempted to find security flaws that could allow them access to contacts, photos, geolocation and other personal data, as well as the ability to remotely wipe the device. In total, they found 11 separate vulnerabilities. In particular, issues with Samsung’s own email client and gallery app created new security risks, in addition to security risks that were already inherent in the underlying Android operating system.

In other words, Android OEM software is adding security risks as well as unnecessary clutter and update delays to Android phones.

Fortunately, the biggest of the 11 flaws were able to be fixed within 90 days of their discovery and the three remaining pose lesser risks and will also be fixed in November. While the team has resolved the issues on the Galaxy S6 Edge, there’s no way they can achieve the same kind of research for the many thousands of other Android devices on the market.

For now, Google has committed to pushing out monthly Android security patches and if it finds the necessary cooperation from mobile carriers, it could make some progress on having a more security strategy.

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

New Products

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings.

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises.

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols.