Skip to content
OpenAdvisories
Medium · 4.0 CVE-2022-27824 EUVD-2022-32312GHSA-6wc3-rrvf-6pf6

Improper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of …

Published Apr 11, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library prior to SMR Apr-2022 Release 1 allows out of bounds read via a crafted media file

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Q(10), R(11), S(12) – < SMR Apr-2022 Release 1 SMR Apr-2022 Release 1

References