If you have a smartphone with an Exynos chip from Samsung, it is better not to make calls via WLAN. According to research by Google, hackers then have free rein to your smartphone.

Project Zero, Google’s security research team, discovered no fewer than eighteen zero days in Samsung’s Exynos chip. Google classifies four of them as very serious vulnerabilities, including CVE-2023-24033. These bugs can be exploited by hackers Internet on baseband to perform an attack. All an attacker has to do is get your phone number.

Due to the severity of the vulnerability and the ease with which it can be exploited, Google is breaking with its usual practice of disclosing zero days. Normally, Google would wait until the manufacturer rolls out a patch so as not to give attackers a free hand. But for now, Samsung doesn’t seem to be in any rush to roll out an update. Google has already done this for its own Pixel smartphones.

While waiting for Samsung to act, Google recommends not making calls over WiFi and Voice over LTE turn off. As a result, you will no longer be able to make phone calls over the Internet and the quality of your phone calls may be affected.

Is my device vulnerable?

You only have to worry if you own a device with an Exynos chip. Samsung publishes a list of vulnerable versions on its website. In addition to Samsung smartphones and smartwatches, some Google Pixel (6.6a, 6 Pro, 7, 7 Pro) and Vivo models are also at risk.

Below the list of vulnerable devices are some popular Samsung models. Think of the Galaxy S22, which appeared in Europe with an Exynos chip, and the budget smartphone Galaxy A53. The recently launched Galaxy S23 range is not at risk as it is equipped with a Qualcomm chip.