Samsung KnoxVault Trustlet Out-of-Bounds Write Vulnerability

A high-severity out-of-bounds write vulnerability has been identified in the KnoxVault trustlet, affecting Samsung devices running Android 14 and 15, prior to the July 2025 Security Maintenance Release. This vulnerability allows local privileged attackers to write to out-of-bounds memory, potentially leading to arbitrary code execution or other malicious outcomes.

Impact

Exploitation of this vulnerability could allow local privileged attackers to write to out-of-bounds memory, which can lead to memory corruption and potentially allow for arbitrary code execution.

Remediation

Users can apply the July 2025 Security Maintenance Release, which includes the patch for this vulnerability. This update is part of the regular monthly security update process for Samsung devices.