WID-SEC-W-2025-2709

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Samsung Android: Mehrere Schwachstellen

view advisory published 2025-12-01

Ein Angreifer kann mehrere Schwachstellen in Samsung Android ausnutzen, um Privilegien zu erweitern, vertrauliche Informationen offenzulegen oder Speicherbeschädigungen durchzuführen, was zu weiteren Angriffen wie Codeausführung oder Denial-of-Service führen kann.

01

describes (8)

Related CVEs.

IDseverity exploitable
CVE-2025-58480UShigh7.5—
Heap-based buffer overflow in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-58479UShigh7.5—
Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-58478UShigh7.5—
Out-of-bounds write in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-58477USmedium6.5—
Out-of-bounds write in parsing IFD tag in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-58476USmedium4.6—
Out-of-bounds read vulnerability in bootloader prior to SMR Dec-2025 Release 1 allows physical attackers to access out-of-bounds memory.
CVE-2025-58475USmedium4.4—
Improper input validation in libsec-ril.so prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
CVE-2025-21080UShigh7.1OT elevated—
Improper export of android application components in Dynamic Lockscreen prior to SMR Dec-2025 Release 1 allows local attackers to access files with Dynamic Lockscreen's privilege.
CVE-2025-21072USmedium4.4—
Out-of-bounds write in decoding metadata in fingerprint trustlet prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan