Skip to content
OpenAdvisories
Medium · 4.4 CVE-2022-27573 EUVD-2022-32074GHSA-g25m-xgj6-g247

Improper input validation vulnerability in parser_infe and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Relea…

Published Apr 11, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper input validation vulnerability in parser_infe and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attackers.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Q(10), R(11), S(12) – < SMR Apr-2022 Release 1 SMR Apr-2022 Release 1

References