Memory Corruption Vulnerability in Samsung Devices

CVE-2025-21007

What is CVE-2025-21007?

An out-of-bounds write vulnerability exists in libsavsvc.so, affecting Samsung devices running Android versions prior to version 15. This flaw allows local attackers to exploit uninitialized memory, potentially leading to memory corruption and unauthorized access to system resources. Users are encouraged to update their devices to mitigate the risks associated with this vulnerability.

References