Skip to content
OpenAdvisories
High · 7.0 CVE-2025-20882 EUVD-2025-2195GHSA-pwq9-pfrr-gc7w

Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to …

Published Feb 4, 2025 · Updated Feb 4, 2025 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Jan-2025 Release in Android 12, 13, 14

Advisories 2

References