Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-20905 EUVD-2025-2217GHSA-5wmc-7h58-9rmm

Out-of-bounds read and write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to read and write out-o…

Published Feb 4, 2025 · Updated Feb 4, 2025 · Assigned by SamsungMobile

Description

Out-of-bounds read and write in mPOS TUI trustlet prior to SMR Feb-2025 Release 1 allows local privileged attackers to read and write out-of-bounds memory.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — SMR Feb-2025 Release in Android 12, 13, 14 devices using Qualcomm chipsets

Advisories 2

References