Description
Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices | — | SMR Oct-2024 Release in Android 12, 13, 14 |
Advisories 2
- WID-SEC-2024-3095 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 22, 2024
- NCSC-2024-0391 Kwetsbaarheden verholpen in Google Android en Samsung Mobile NCSC-NL (Netherlands) · Oct 8, 2024