Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-20904 EUVD-2025-2216GHSA-frcf-g5px-vp53

Out-of-bounds write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to cause memory corruption.

Published Feb 4, 2025 · Updated Feb 4, 2025 · Assigned by SamsungMobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Out-of-bounds write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to cause memory corruption.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Feb-2025 Release in Android 12, 13, 14 devices using Qualcomm chipsets

Advisories 2

References