Your Samsung phone may have a big security flaw – here’s how to stay safe
Several Galaxy and Google Pixel phones have a vulnerable modem
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
Google’s security research team has discovered some major vulnerabilities in Pixel andSamsungGalaxy phones that you’ll want to protect yourself against as soon as you can.
The issues were discovered in the Exynos modems produced by Samsung that are used by a variety of smartphones including theGoogle Pixel 6,Google Pixel 7, andSamsung Galaxy S22among others.
As revealed in theProject Zero team’s blog postpeople using a device that relies on this chip will want to turn off Wi-Fi calling and Voice-over-LTE in their device settings in order to protect themselves until a security patch is released. The affected devices are:
However, not every version of every device is affected. For example, the European Samsung Galaxy S22 uses a vulnerable Exynos modem, but the American version doesn’t. But for other devices, like the A53, all versions of that phone use the vulnerable Exynos 1280.
So before turning off Wi-Fi calling and Voice-over-LTE you might want to double check your exact model is indeed impacted usingSamsung’s official information.
How can you protect your phone?
For its part, Google says the March 2023 security update that’s been rolled out to Pixel 6 and Pixel 7 phones should patch these issues.
In a statement we received, Samsung told us that it takes its customer’s safety seriously and it has released a patch for five of six vulnerabilities impacting select Galaxy devices this month. Another security patch will be coming in April to address the remaining vulnerability, so make sure your device is up to date if you want it to be protected.
Get the best Black Friday deals direct to your inbox, plus news, reviews, and more.
Sign up to be the first to know about unmissable Black Friday deals on top tech, plus get all your favorite TechRadar content.
In the meantime, you can protect yourself by going into your phone’s Settings. Using the search option look for “Wi-Fi Calling” and you’ll see a toggle to turn it on or off in the Connections sub-menu. If you want your Samsung phone to be secure you’ll want to turn it off, though you’ll then lose access to the feature until you turn it back on.
To turn off Voice-over-LTE, head back to the Connections menu and this time tap on Mobile Networks. You should then see a new list of options and toggles next to “VoLTE calls SIM 1” and “VoLTE calls SIM 2” (though the second option will only appear if you have two SIMs installed). Turn the toggles off and that should mean your phone’s protected against the vulnerabilities discovered by Project Zero.
Turning off these features will mean your calls are lower quality, but you should still be able to make calls.
Analysis: Why reveal these flaws?
If these flaws represent serious risks to our devices, why would Google Project Zero reveal them? Wouldn’t it be better to keep them private so hackers don’t know they exist?
Project Zero does keep the most serious of exploits private only sharing them with relevant device manufacturers to ensure that they aren’t abused by bad actors. But for other security vulnerabilities, it can be better to keep a wider net of people in the loop.
For one, there is a way for us to protect ourselves from attacks that take advantage of these vulnerabilities – until a patch is rolled out you can turn off Wi-Fi calling and Voice-over-LTE as we explained above. For another, it’s possible these exploits aren’t too difficult to discover, so by keeping them hidden from the public Project Zero runs the risk of leaving regular folks in the dark while hackers run rampant.
Lastly, revealing the issues should encourage device manufacturers to roll out a patch asap. Now not only is Google’s Project Zero team hounding them to fix the issue, but device owners can also reach out through official forums and contact forms to get their phone maker to fix the problem.
Looking for a phone that’s not impacted by this modem issue? Check out our picks for thebest phoneto find several options that don’t rely on the affected Exynos modem.
Hamish is a Senior Staff Writer for TechRadar and you’ll see his name appearing on articles across nearly every topic on the site from smart home deals to speaker reviews to graphics card news and everything in between. He uses his broad range of knowledge to help explain the latest gadgets and if they’re a must-buy or a fad fueled by hype. Though his specialty is writing about everything going on in the world of virtual reality and augmented reality.
We might have our first look at the long-rumored Samsung tri-fold
Samsung is again rumored to be working on a cheaper Galaxy Z Flip 6
NYT Strands today — hints, answers and spangram for Sunday, November 10 (game #252)