Critical · 9.0 CVE-2021-25360 EUVD-2021-12256GHSA-g8xw-6mmv-frg4

An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrar…

Published Apr 9, 2021 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.

Affected products

Vendor	Product	Affected	Fixed
Samsung Mobile	Samsung Mobile Devices	Q(10.0) – < SMR APR-2021 Release 1	SMR APR-2021 Release 1

References

https://security.samsungmobile.com/
https://security.samsungmobile.com/securityUpdate.smsb