Samsung Mobile SoftSIM Trustlet Sensitive Information Disclosure Vulnerability

A vulnerability exists in the SoftSIM trustlet on select Android 12, 13, and 14 devices, prior to the January 2025 Security Maintenance Release. This vulnerability allows local privileged attackers to access sensitive test keys due to the inclusion of confidential information in the test code. The issue arises from improper handling of sensitive data, which could be exploited by attackers with elevated privileges.

Impact

Exploitation of this vulnerability allows local privileged attackers to retrieve sensitive test keys from the SoftSIM trustlet.

Remediation

Users can apply the January 2025 Security Maintenance Release, which includes the necessary patch, to address this vulnerability.