Samsung KnoxVault Trustlet Out-of-Bounds Write Vulnerability Allowing Memory Corruption

A vulnerability exists in the KnoxVault trustlet, specifically in versions prior to the Samsung Security Maintenance Release (SMR) July 2025 Release 1. This vulnerability allows local privileged attackers to perform an out-of-bounds write when setting the authentication secret, leading to the potential corruption of memory.

Impact

Exploitation of this vulnerability allows for arbitrary memory write operations, which could be used to manipulate program execution or cause a crash.

Remediation

Users can apply the Samsung SMR July 2025 Release 1, which includes the patch for this vulnerability.