Use-After-Free Vulnerability in SANM Decoding in Vendor Product

CVE-2025-59734

What is CVE-2025-59734?

A vulnerability in the SANM decoding process allows for potential use-after-free write issues when handling animations in Vendor Product versions below 8.0. When a STOR chunk is present, subsequent FOBJ chunks can cause the code to reference frames with invalid sizes, leading to improper buffer handling. This results in a scenario where the memory allocated for a previously freed buffer is accessed, which could lead to data corruption and unexpected behaviors. To mitigate risks, it is crucial to upgrade to version 8.0 or higher.

References