Hack The Galaxy: Hunting Bugs in the Samsung Galaxy S6 Edge
Summary: Project Zero researchers spent one week testing a Samsung Galaxy S6 Edge in a five-versus-five team contest and found 11 high-impact security issues, including a directory traversal bug (CVE-2015-7888) that writes a file as system and an email client flaw (CVE-2015-7889) that lets an unprivileged app forward the user's emails to another account. Samsung fixed eight issues in its October Maintenance Release and said the remaining three would be fixed in November, confirmed on the tested device with build G925VVRU4B0G9.
Why it matters: Eleven serious bugs surfaced in a single week on a flagship device, and three of them - including a script injection flaw in the email client - were still unpatched when the findings were published, leaving the fix timeline in the OEM's hands rather than yours.
Read the original at Google Project Zero ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2015-7888CVE-2015-7889
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026