Skip to content
OpenAdvisories
Medium · 6.9 CVE-2022-39908 EUVD-2022-42353GHSA-qj34-24mc-v6wc

TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-…

Published Dec 8, 2022 · Updated Apr 22, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Q(10) and R(11) OS with libsadapter, S(12) and T(13) OS with libsthmbcadapter – < SMR Dec-2022 Release 1 SMR Dec-2022 Release 1

References