Interrupt Labs security researchers were the first to demo a Samsung Galaxy S23 zero-day in an improper input validation attack, while the ToChim team exploited a permissive list of allowed inputs to hack Samsun’s flagship.

and …

In all four cases, the device ran the latest version of the Android operating system with all security updates installed, according to the contest rules.