Samsung Mobile Out-of-Bounds Write Vulnerability in libsec-ril.so

A vulnerability allowing out-of-bounds memory writes has been identified in the libsec-ril.so library, affecting several versions of Android on Samsung devices. This issue arises from improper input validation, which local privileged attackers could exploit. The vulnerability is present in multiple Android versions, including 13, 14, 15, and 16.

Impact

Exploitation of this vulnerability allows for out-of-bounds memory writes, which can lead to memory corruption and potentially allow for arbitrary code execution.

Remediation

Users can apply the December 2025 Security Maintenance Release (SMR) to address this vulnerability. This update is part of the regular monthly security update process and includes patches from both Google and Samsung.