This vulnerability involves an out-of-bounds write in the Samsung Mobile library libsthmbc.so before One UI 8.5. It permits local attackers with limited privileges to write to memory outside the allocated buffer, which could cause memory corruption. The CVSS 4.0 vector indicates low attack complexity and no user interaction required, but the attacker must have local privileges. The vulnerability is classified under CWE-787 (Out-of-bounds Write). No patch or official remediation level has been disclosed by the vendor as of the publication date.

Successful exploitation could allow a local attacker to corrupt memory, potentially leading to application crashes or escalation of privileges. However, exploitation requires local access with limited privileges, and no remote or network attack vector is indicated. The vulnerability does not require user interaction and has high impact on confidentiality and low impact on integrity and availability according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit local access to trusted users only. Monitor for vendor updates regarding patches or mitigations for libsthmbc in One UI.