Out-of-bounds Write Vulnerability in Samsung Mobile's libsthmbc.so

CVE-2025-20882

What is CVE-2025-20882?

The vulnerability exists due to an out-of-bounds write condition that exposes uninitialized memory in libsthmbc.so prior to the SMR Jan-2025 Release 1. Local attackers can exploit this flaw to execute arbitrary code, but it requires user interaction to trigger the vulnerability. This can lead to significant security risks if exploited, highlighting the importance of keeping software up-to-date.

References