← Database

CVE-2025-20890

HIGH CVSS: 7.0 Published: 2025-02-04 Modified: 2026-06-17

Description

Out-of-bounds write in decoding frame buffer in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability.

Affected Platforms

Samsung Android

Weakness Type

CWE-787

References