Description
Inclusion of sensitive information in test code in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to get test key.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices | — | SMR Jan-2025 Release in Select Android 12, 13, 14 devices |
Advisories 2
- NCSC-2025-0003 Kwetsbaarheden verholpen in Google Android en Samsung Mobile NCSC-NL (Netherlands) · Jan 7, 2025
- WID-SEC-2025-0014 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 6, 2025