Remotely Exploitable Out-of-Bounds Write Vulnerability in librtppayload.so Prior to SMR Oct-2024 Release 1

CVE-2024-34667

Summary

An out-of-bounds write vulnerability has been identified in the H.265 parsing functionality of Samsung's librtppayload.so. This flaw allows remote attackers to exploit the vulnerability and execute arbitrary code with system privileges, provided that user interaction occurs to trigger the attack. Systems affected are those running versions prior to the SMR October 2024 Release 1. It is crucial for users and administrators of affected systems to apply available security updates promptly to mitigate potential risks associated with this vulnerability.

References