TLDR InfoSec · STRATEGIES & TACTICS
SAMSUNG S24: OUT OF BOUNDS WRITE IN APE DECODER
Summary from the TLDR InfoSec newsletter
A zero-click vulnerability (CVE-2024-49415) in Samsung's Monkey's Audio decoder allows for code execution through malicious audio messages on RCS-enabled phones. The vulnerability has been patched by Samsung.