176 Vulnerabilities in Samsung Preinstalled Apps

What it is

Oversecured's writeup of 176 vulnerabilities in Samsung preinstalled system apps (2022–2025). The summary already lists the bug categories and the SVE IDs; what the page adds is the threat model that makes these worth acting on and the concrete mitigation boundary.

Why these differ from ordinary app bugs

The page's central argument is economic and structural, not a bug list. Preinstalled system apps:

• run with elevated privileges (many services as UID 1000 / system),
• persist through factory reset and cannot be uninstalled without rooting,
• are trusted by security software and sit outside Google Play Protect,
• ship on 20–25% of the global smartphone market.

The page contrasts this with a traditional Android full-chain exploit — Zerodium's public listing of $1.5M, requiring a purchased browser exploit plus chaining — against preinstalled-app bugs at ~$0 operational cost, since the privileged, trusted, unremovable app is already on the device. That is the reason a preinstalled-app class bug deserves attention disproportionate to a single app CVE.

What to do

All 176 issues were patched through regular Samsung security updates distributed 2022–2025. Devices at the current Android Security Patch Level are protected from every reported vulnerability — there is no separate action beyond keeping the patch level current. The individual findings map to internal IDs (145–180) grouped by category rather than to public CVEs, so patch-level currency, not per-CVE tracking, is the actionable check.

Caveats

The vulnerability IDs on the page (145–180, plus three SVE numbers) are Oversecured/Samsung internal identifiers; the post gives category descriptions and impacts but not per-finding technical detail or reproduction steps.