Remote Code Execution Vulnerability in librtppayload.so Prior to SMR Oct-2024 Release 1

CVE-2024-34668

Summary

The vulnerability arises from an out-of-bounds write flaw in the H.263 format parsing within librtppayload.so, which allows remote attackers to potentially execute arbitrary code with system privileges. To trigger this vulnerability, user interaction is required, creating a risk for users when handling specially crafted inputs that take advantage of this weakness. The issue affects various Samsung products using the affected versions of librtppayload.so and reveals the need for prompt updates to mitigate potential exploits.

References