Samsung modems

This article makes worrying reading
https://www.theregister.com/2023/03/17/android_googl...

In reply to a post by crule:

This article makes worrying reading
https://www.theregister.com/2023/03/17/android_googl...

Thanks, my device is one of them so I've just turned wifi calling and VoLTE off until its fixed

I should note that the Google update hasn't rolled out for Pixel 6 yet.

Google : How to turn off VoLTE and Wi-Fi Calling on your Pixel 6 or Galaxy S22

https://9to5google.com/2023/03/17/wi-fi-calling-off/

I dont have VoLTE option but do have "4G calling SIM1". Is that the same?

Yes

On the Pixel 6 there is no option to turn off VoLTE, Google in all their wisdom decided it should be permanently on, I'm not switching on mobile data as that seems about only way to disable it. I've been checking couple of times per day for the update on Pixel 6 as WiFi calling is pretty much only way to guarantee a mobile works at home. 😡

Thanks. Does anyone know why this only effects 4g calling and not 2g or 3g calling?

The update is available to download for Pixel 6, this is 15 days after it was first produced.
The update is 270MB, downloading and installing on my 6pro took about 2hrs

In reply to a post by crule:

This article makes worrying reading
https://www.theregister.com/2023/03/17/android_googl...

As far as I understand, and correct me if I'm wrong, but it would require local access or your mobile network operator to be compromised with a malicious insider, generally I think the risk is limited albeit possible. Given the prevalence of these devices we will soon hear if there's real world exploits. Notably, I do not see the exploit published anywhere either. I'm not saying it is safe, although I would not be turning off my mobile data given the risk here.

In reply to a post by ukhardy07:

it would require local access or your mobile network operator to be compromised with a malicious insider

There are 18 exploits in total, some are as you suggested but the main concerns simply need your telephone number.

In reply to a post by ukhardy07:

As far as I understand, and correct me if I'm wrong, but it would require local access or your mobile network operator to be compromised with a malicious insider, generally I think the risk is limited albeit possible. Given the prevalence of these devices we will soon hear if there's real world exploits. Notably, I do not see the exploit published anywhere either. I'm not saying it is safe, although I would not be turning off my mobile data given the risk here.

The biggest risk would be on public WiFi. Mobile operators should be able to block the exploited as most work as CG-Nat.