Samsung Libsthmbc.so Out-of-Bounds Read Vulnerability Allowing Arbitrary Memory Read

A vulnerability allowing out-of-bounds read has been identified in the libsthmbc.so library, prior to the SMR January 2025 Release 1. This vulnerability arises from improper handling of malformed bitstreams for smp4vtd, which can lead to local attackers reading arbitrary memory. Exploitation of this vulnerability requires user interaction.

Impact

Exploitation of this vulnerability allows local attackers to read arbitrary memory, which could potentially be used to access sensitive information or manipulate program behavior.

Remediation

Users can apply the January 2025 Security Maintenance Release (SMR) to address this vulnerability. This update is available for major flagship models.