--- title: "Samsung patches 176 vulnerabilities in system apps: massive campaign to clean up 'bloatware'" description: "🔒 **Samsung patched 176 vulnerabilities in system software** Researchers from Oversecured identified critical holes in Samsung's pre-installed applications, which operated with elevated privileges and could not be removed by users. ⚠️ **What was found:** • Access to camera and microphone; • Account hijacking; • Code execution via images (JPEG). ✅ **Result:** All errors have been fixed. Samsung received praise for its promptness, but the case highlighted the risks of 'bloatware' in 2026." date: 2026-08-11T23:08:53.000Z lang: en url: https://xab.info/en/posts/samsung-patched-176-vulnerabilities-in-system-apps-en tags: [samsung, cybersecurity, oversecured, bloatware, mobile-security] publisher: "XAB.info" --- # Samsung patches 176 vulnerabilities in system apps: massive campaign to clean up 'bloatware' ![Symbolic representation of a Samsung system app with logo on a white block, illustrating security update and bloatware removal](https://xab.info/media/2026/08/12/samsung-zakryla-176-uyazvimostey-v-sistemnykh-prilozheniyakh/samsung-zakryla-176-uyazvimostey-v-sistemnykh-prilozheniyakh-1.webp) ## 🎯 Key Points - 176 vulnerabilities identified in Samsung system applications. - Vulnerabilities allowed access to camera, microphone, and traffic interception. - Samsung promptly fixed all found errors. - The problem was exacerbated by the inability to remove system software. In 2026, the cybersecurity industry faced a new wave of awareness regarding the risks associated with pre-installed software. Researchers from Oversecured, a company specializing in mobile platform security audits, published a comprehensive report on the results of a three-year monitoring of the Samsung ecosystem. The analysis revealed 176 critical vulnerabilities in the South Korean giant's system applications, which have since been fixed by the manufacturer following notification from the experts. ### The transformation of the concept of 'bloatware' into a security threat The term 'bloatware' (redundant software), historically used to describe excessive applications that slow down devices, acquired a new, more alarming meaning in the Oversecured report. Over the past three years, specialists studied Samsung's pre-installed system utilities that operate with elevated privileges. The problem lies in the fact that these applications, being an integral part of the system, often fall outside the scope of standard Google Play Protect security mechanisms. Furthermore, users cannot remove them using standard means, making any errors in their code a permanent attack vector. ### Attack mechanics: from camera interception to code execution via JPEG The spectrum of discovered vulnerabilities is striking in its diversity and potential destructive impact. Researchers identified errors allowing attackers to access the device's camera and microphone without the owner's knowledge. Another category of vulnerabilities allowed for the one-click remote takeover of a Samsung account, opening the path to identity theft and private information. Of particular danger were errors related to network packet processing: by manipulating DNS requests, it was possible to intercept all of the user's network traffic. One of the most sophisticated vulnerabilities concerned the processing of graphic files. Theoretically, an attacker could create a JPEG image containing malicious code. When such a file was opened from the memory card on the device, a controlled library would be loaded and executed. Additionally, errors were found that allowed applications to write arbitrary files to protected areas of the file system without proper access control checks. ### Samsung's reaction and the patching process A key moment in this story was the reaction of the Samsung corporation. Upon receiving reports from Oversecured, the company responded promptly to the identified issues. All 176 vulnerabilities were fixed in software updates. Experts noted that the interaction process was transparent, and the manufacturer demonstrated high responsibility regarding the security of its users. However, the mere fact of having such a large number of errors in system software, which is updated centrally, raises questions about testing processes during the development phase. ### Contradictory data During the analysis of information, certain discrepancies arose in the interpretation of the scale of the problem. In the initial Oversecured reports, the emphasis was placed on the number of vulnerabilities specifically in *applications* (176). However, in a number of secondary sources, including MSN materials, information appeared stating that Samsung fixed 'nearly 200 security issues in phone hardware'. This created confusion: does this refer exclusively to the software level (bloatware), or do the vulnerabilities also affect the driver/hardware level? According to the XAB.info editorial board, the most accurate is the initial report on 176 software vulnerabilities, while the figure '200' may include related security issues fixed within the same update cycle. ### Security prospects in 2026 The events described in the report highlight that even in 2026, when protection technologies have reached a high level, pre-installed software remains a 'weak link'. Samsung smartphone users who have received updates are now protected from the described attack vectors. Nevertheless, the Oversecured case serves as a reminder of the importance of independent security audits and the need for manufacturers to review the architecture of their system applications to minimize risks associated with their privileged access. ## 🔍 Fact-Check Verification - [Samsung patches nearly 200 security issues on its phone hardware - here's what you need to know](https://www.msn.com/en-us/technology/software/samsung-patches-nearly-200-security-issues-on-its-phone-hardware-here-s-what-you-need-to-know/ar-AA29LTNG) - Источник подтверждает масштаб исправлений, но использует формулировку 'почти 200' и упоминает 'hardware', что требует уточнения в тексте статьи. - [Security researchers praise Samsung for handling reported vulnerabilities](https://www.heise.de/en/news/Security-researchers-praise-Samsung-for-handling-reported-vulnerabilities-11368219.html) - Подтверждает позитивную реакцию Samsung и работу исследователей Oversecured. ## ❓ FAQ ### Q: What exactly was found in Samsung applications? **A:** Researchers discovered 176 vulnerabilities, including the ability to access the camera, microphone, and hijack accounts. ### Q: Are these vulnerabilities dangerous now? **A:** No, Samsung has already fixed all identified errors in software updates. ### Q: Who conducted the research? **A:** The security audit was conducted by the company Oversecured over a period of three years.