4 ms·
> Samsung added a custom JPEG parser in Little Kernel that is used to show logos and error messages while booting. The code responsible for loading the JPEG fil
by mdaniel 2y ago
> Samsung added a custom JPEG parser in Little Kernel that is used to show logos and error messages while booting. The code responsible for loading the JPEG file will place it in a fixed-size structure on the heap. But it never checks the size of the file, causing a heap overflow.
Heh, file format parsers - the GIFt that just keeps on giving
- veeti 2y agoAnd it's not even the first time Samsung does this: https://googleprojectzero.blogspot.com/2020/07/mms-exploit-part-1-introduction-to-qmage.html https://googleprojectzero.blogspot.com/2020/07/mms-exploit-p...