Skip to content
OpenAdvisories
Medium · 4.0 CVE-2022-27823 EUVD-2022-32311GHSA-mvqp-c59v-66x4

Improper size check in sapefd_parse_meta_HEADER_old function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of boun…

Published Apr 11, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper size check in sapefd_parse_meta_HEADER_old function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Q(10), R(11), S(12) – < SMR Apr-2022 Release 1 SMR Apr-2022 Release 1

References