Samsung Zero-Day Vuln Under Active Exploit, Google Warns

A critical zero-day (CVE-2024-44068) was found in Samsung Exynos m2m scaler driver (affecting Exynos 9820, 9825, 980, 990, 850, and W920) that allows a use-after-free leading to privilege escalation and arbitrary code execution in a privileged camera server process; the flaw (CVSS 8.1) is reported exploited in the wild as part of an EoP chain, was credited to Google researchers, and was patched in Samsung's October security fixes.