Samsung said Wednesday it is working on an update for a software flaw that could allow attackers to siphon personal data from a phone. The vulnerability affects Samsung's S2 and S3 phones and several models of its Galaxy line, including the Note, Note II, Note Plus and Note 10.1, all of which use the Korean company's Exynos 4210 and 4412 model processors.