Samsung Libsthmbc.so Out-of-Bounds Write Vulnerability Allowing Arbitrary Code Execution

A high-severity out-of-bounds write vulnerability has been identified in the libsthmbc.so library, present in Samsung devices running Android 12, 13, or 14, prior to the January 2025 Security Maintenance Release. This vulnerability allows local attackers to execute arbitrary code with elevated privileges. The issue arises from improper handling of the buffer that stores decoded video frames, creating an opportunity for exploitation. User interaction is required to trigger this vulnerability.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution with elevated privileges on the affected device.

Remediation

Users can update to the January 2025 Security Maintenance Release to address this vulnerability.