← Database

CVE-2025-20889

MEDIUM CVSS: 5.3 Published: 2025-02-04 Modified: 2026-06-17

Description

Out-of-bounds read in decoding malformed bitstream for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability.

Affected Platforms

Samsung Android

Weakness Type

CWE-787

References