Description
Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out-of-bounds memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices | — | SMR Apr-2024 Release in Android 12, 13, 14 |
Advisories 1
- WID-SEC-2024-0757 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Apr 1, 2024