Skip to content
OpenAdvisories
High · 7.3 CVE-2024-20849 EUVD-2024-18564GHSA-6wpm-mvc7-c878

Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers…

Published Apr 2, 2024 · Updated Aug 27, 2024 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Apr-2024 Release in Android 12, 13, 14

Advisories 1

References