CVEs-PoC/2021/CVE-2021-25455.md

CVE-2021-25455

Description

OOB read vulnerability in libsaviextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to access arbitrary address through pointer via forged avi file.

POC

Reference

• https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=9
• https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=9

Github

No PoCs found on GitHub currently.