Description
Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices | — | SMR Jul-2024 Release in Android 12, 13, 14 |
Advisories 2
- NCSC-2024-0278 Kwetsbaarheden verholpen in Google Android en Samsung Mobile NCSC-NL (Netherlands) · Jul 3, 2024
- WID-SEC-2024-1498 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 1, 2024