Security researcher Ken Gannon of NCC Group (@yogehi) discovered the directory traversal vulnerability in Samsung’s Quick Share feature, which allows users to easily share files between devices. Security experts recommend keeping automatic updates enabled and exercising caution when using Quick Share with unknown devices or on public networks. According to the Zero Day Initiative advisory, the vulnerability provides attackers with network access to create arbitrary files on affected installations of Samsung Galaxy S24. Cyber Security News is a Dedicated News Platform For Cyber News, Cyber Attack News, Hacking News & Vulnerability Analysis. The directory traversal vulnerability could allow malicious actors to create files in arbitrary locations with the permissions of the current user. Galaxy S24 users should verify they have the latest security updates installed by checking Settings > Software Update > Download and Install. An attacker can leverage this vulnerability to create files in the context of the current user”, reads the advisory. The April 2025 security patch fixed over 60 issues, including 4 critical vulnerabilities.
This Cyber News was published on cybersecuritynews.com. Publication date: Tue, 15 Apr 2025 06:50:13 +0000