Suspected security hole found in many Samsung devices

Samsung's Galaxy Note 2.

(Credit: Josh Miller/CNET)

A suspected security hole affecting a handful of Samsung smartphones could give apps access to user data and leave the handset vulnerable to malicious apps and bricking, according to a developer.

The vulnerability, which was discovered and detailed by an XDA member with the handle "alephzain," lies in Exynos 4, the ARM-based system-on-chip typically found in Samsung smartphones and tablets. Alephzain developed an exploit he said bypasses the system permissions, allowing any app to extract data from the device's RAM or inject malicious code into the kernel.

Related stories

• 
  


• Group says it found child workers at Samsung supplier factory


• 
  


• Google Maps returns to the iPhone


• 
  


• Verizon updates Samsung's Galaxy S3 to Android 4.1


• 
  

Alephzain said he stumbled upon the vulnerability while trying to find a new way to root his Galaxy S3, but that the exploit affects the Galaxy S2, Galaxy Note, and Meizu MX as well. However, the Nexus 10 is unaffected as it uses the Ex... [Read more]