Samsung Mobile Out-of-Bounds Read Vulnerability in secfr Trustlet Allowing Privileged Memory Access

A vulnerability allowing out-of-bounds read has been identified in the enrollment with the cdsp frame secfr trustlet, in Samsung Mobile devices running Android versions 13, 14, and 15, prior to the April 2025 Security Maintenance Release. This vulnerability allows local privileged attackers to read memory outside of the intended bounds, potentially leading to unauthorized access to sensitive information or memory corruption.

Impact

Exploitation of this vulnerability allows local privileged attackers to read out-of-bounds memory, which could lead to information disclosure or memory corruption.

Remediation

Users can apply the April 2025 Security Maintenance Release to address this vulnerability.