Arbitrary Code Execution Vulnerability in Librtppayload.so Pre-Oct-2024 Release 1

CVE-2024-34666

Summary

The vulnerability involves an out-of-bounds write in the parsing of H.264 format within the shared library librtppayload.so, found in certain Samsung devices. This issue can potentially allow remote attackers to execute arbitrary code with system privileges, but requires user interaction to trigger the vulnerability. Users of affected products should be aware of the risk and ensure timely updates to the latest release, which addresses this security concern.

References