Sign in

6.9 Medium

CVE-2022-39908 TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local…

Description

TOCTOU vulnerability in Samsung decoding library for video thumbnails prior to SMR Dec-2022 Release 1 allows local attacker to perform Out-Of-Bounds Write.

Affected products and versions

Product	Affected versions	Fixed in
Samsung Mobile Devices	Versions not published

The 866 CVEs of Samsung Mobile Devices →

CVE-2026-21126 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 6.9 Medium CVE-2026-21125 Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 8.6 High CVE-2026-21124 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 8.6 High CVE-2026-21123 Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with… 6.7 Medium

Do you use Samsung Mobile Devices?

Track this CVE Watch Samsung Mobile Devices Check my SBOMs

www.cveye.io/en/cve/CVE-2022-39908

Timeline

Published December 8, 2022
Last modified April 22, 2025

References

security.samsungmobile.com security.samsungmobile.com

Track this CVE