Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices

A Google Project Zero researcher discovered a zero-click exploit targeting Samsung devices running Android 12, 13, and 14. The vulnerability, CVE-2024-49415, allows remote attackers to execute arbitrary code by sending a specially crafted audio message via Google Messages. Samsung released a patch in December 2024 to address the issue.