Description
Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices | — | SMR Jan-2025 Release in Android 12, 13, 14 |
Advisories 2
- NCSC-2025-0003 Kwetsbaarheden verholpen in Google Android en Samsung Mobile NCSC-NL (Netherlands) · Jan 7, 2025
- WID-SEC-2025-0014 Samsung Android: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 6, 2025