TLDR InfoSec · STRATEGIES & TACTICS

SAMSUNG S24: OUT OF BOUNDS WRITE IN APE DECODER

project-zero.issues.chromium.org5 min read

Summary from the TLDR InfoSec newsletter

A zero-click vulnerability (CVE-2024-49415) in Samsung's Monkey's Audio decoder allows for code execution through malicious audio messages on RCS-enabled phones. The vulnerability has been patched by Samsung.