CVE-2026-43499-S24U

CVE-2026-43499 para Galaxy S24 Ultra SM-S928U1 Implementación de código abierto y específica para el dispositivo, destinada al Samsung Galaxy S24 Ultra estadounidense con firmware S928U1UES6DZF2. Objetivo compatible Model: SM-S928U1 Codename: e3q Build / AP: S928U1UES6DZF2 / S928USQS6DZF2 Kernel:...

Samsung S24 MP3 Decoder Out-Of-Bounds Read

There is an out-of-bounds read in the MP3 decoder in the Samsung S24. The function smp123djointstereov1 indexes into several tables for decoding, and does not check that the index is valid, allowing the tables to be read out of bounds. It may be possible to use this bug to bypass ASLR, as loading...

Samsung S24 VC1 Decoder Out-Of-Bounds Memset

There are several calls to memset in the vc1 decoder on the Samsung S24, which can write out of bounds of a heap buffer. The length of the memsets in svc1expandrightapfrm are calculated based on length values that don't always correspond to the heap buffer length...

Samsung S24 MP3 Decoder Out-Of-Bounds Read

There is an out-of-bounds read in the MP3 decoder in the Samsung S24. The function smp123djointstereov1 indexes into several tables for decoding, and does not check that the index is valid, allowing the tables to be read out of bounds. It may be possible to use this bug to bypass ASLR, as loading...