CVE-2022-26097

Vulnerability

The vulnerability resides in the parser_unknown_property function within the libsimba library used in Samsung devices. A null pointer dereference can be triggered when parsing malformed data, leading to an out-of-bounds write. This affects versions prior to the SMR Apr-2022 Release 1 security update [1].

Exploitation

An unauthenticated remote attacker can exploit this by sending a specially crafted packet to a vulnerable device. The attacker does not require any prior access or user interaction, as the vulnerable code path is reachable over the network without authentication [1].

Impact

Successful exploitation allows the attacker to perform an out-of-bounds write on the heap, which can lead to memory corruption. This may be leveraged for further compromise, such as remote code execution or denial of service, though the primary impact is information disclosure and system instability [1].

Mitigation

Users should update to the SMR Apr-2022 Release 1 security patch, released in April 2022, which addresses the issue. No workarounds are available. The vulnerability is not known to be listed in CISA's Known Exploited Vulnerabilities (KEV) catalog at the time of writing [1].