Samsung Mobile Out-of-Bounds Read Vulnerability in libsavsac.so

A vulnerability allowing out-of-bounds read has been identified in the audio data parsing of libsavsac.so, in versions prior to SMR April 2025 Release 1. This flaw allows local attackers to read memory outside of the intended bounds.

Impact

Exploitation of this vulnerability could lead to unauthorized access to out-of-bounds memory, potentially allowing for information disclosure or memory corruption.

Remediation

Users can apply the Samsung Security Maintenance Release (SMR) for April 2025 to address this vulnerability.