5.5
CVE-2025-20891
- EPSS 0.03%
- Veröffentlicht 04.02.2025 08:15:30
- Zuletzt bearbeitet 12.02.2025 13:47:21
- Quelle mobile.security@samsung.com
- CVE-Watchlists
- Unerledigt
Out-of-bounds read in decoding malformed bitstream of video thumbnails in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.071 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
|
| mobile.security@samsung.com | 5.3 | 1 | 4.2 |
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:L
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.