Samsung Libsthmbc.so Out-of-Bounds Read Vulnerability Allowing Arbitrary Memory Read

A vulnerability allowing out-of-bounds read has been identified in the libsthmbc.so library, prior to the SMR January 2025 Release 1. This vulnerability arises from improper handling of malformed video thumbnail bitstreams, which can lead to local attackers reading arbitrary memory. Exploitation of this vulnerability requires user interaction.

Impact

Exploitation of this vulnerability allows local attackers to read arbitrary memory, potentially leading to information disclosure or further exploitation.

Remediation

Users can apply the January 2025 Security Maintenance Release, which includes the necessary patch for this vulnerability.