Samsung SMR Buffer Overflow Vulnerability (CNVD-2022-63646)

Samsung SMR is a system patch package from South Korea’s Samsung (Samsung). A buffer overflow vulnerability exists in versions prior to Samsung SMR Apr-2022 Release 1, which stems from incorrect boundary checking in libsflvextractor’s sflvd_rdbuf_bits function. An attacker could exploit this vulnerability to read out-of-bounds memory.