Samsung Mobile Out-of-Bounds Read and Write Vulnerability in mPOS TUI Trustlet

A high-severity out-of-bounds read and write vulnerability has been identified in the mPOS TUI trustlet, affecting Android versions 12, 13, and 14 on devices with Qualcomm chipsets. This vulnerability allows local privileged attackers to read and write memory outside of the intended bounds, potentially leading to memory corruption.

Impact

Exploitation of this vulnerability could allow local privileged attackers to cause memory corruption by reading from and writing to out-of-bounds memory areas.

Remediation

Samsung Mobile has released a patch for this vulnerability as part of the February 2025 Security Maintenance Release. Users can update their devices to this version to address the issue.