Samsung Mobile Out-of-Bounds Write Vulnerability in SoftSIM Trustlet Allowing Memory Corruption

A high-severity out-of-bounds write vulnerability has been identified in the SoftSIM trustlet, affecting select devices running Android 12, 13, and 14, prior to the January 2025 Security Maintenance Release. This vulnerability allows local privileged attackers to cause memory corruption. The issue arises from improper input validation, which can be exploited by attackers with elevated privileges.

Impact

Exploitation of this vulnerability leads to memory corruption, which could potentially be leveraged to execute arbitrary code with privileges.

Remediation

Users can apply the January 2025 Security Maintenance Release to address this vulnerability.