Skip to content
OpenAdvisories
Medium · 5.1 CVE-2024-20848 EUVD-2024-18563GHSA-hxmf-m9x7-frw3

Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Release 1 allows local att…

Published Apr 2, 2024 · Updated Aug 23, 2024 · Assigned by SamsungMobile

Description

Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Release 1 allows local attackers to write out-of-bounds memory.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Apr-2024 Release in Android 12, 13, 14

Advisories 1

References