Skip to content
OpenAdvisories
High · 7.0 CVE-2025-20881 EUVD-2025-2194GHSA-2vrc-ghfq-ww6x

Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attac…

Published Feb 4, 2025 · Updated Feb 4, 2025 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Jan-2025 Release in Android 12, 13, 14

Advisories 2

References