Skip to content
OpenAdvisories
Medium · 4.4 CVE-2022-27574 EUVD-2022-32075GHSA-86qw-x6qp-x39c

Improper input validation vulnerability in parser_iloc and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Relea…

Published Apr 11, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper input validation vulnerability in parser_iloc and sheifd_find_itemIndexin fuctions of libsimba library prior to SMR Apr-2022 Release 1 allows out of bounds write by privileged attacker.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Q(10), R(11), S(12) – < SMR Apr-2022 Release 1 SMR Apr-2022 Release 1

References