Executive brief
TizenFX is Samsung's C# framework providing device APIs for Tizen devices. A missing bounds check in the MediaBufferBase component allows attackers to write data outside allocated memory buffers, potentially causing application crashes or enabling arbitrary code execution on affected devices.
Technical details
The vulnerability is an out-of-bounds write and improper array index validation in the MediaBufferBase component of Samsung's TizenFX library. The root cause is a missing bounds check in a set accessor that fails to validate user-supplied array indices before writing to memory. The vulnerability can be triggered by local or network code that constructs malicious multimedia data, depending on the device and API exposure. An attacker can overflow heap buffers, potentially achieving denial of service or code execution. A patch was merged to Samsung/TizenFX on 26 August 2026 adding the missing bounds check.
Affected products
- Samsung TizenFX prior to patch merged 2026-08-26
Timeline
- 2026-09-03: disclosed
- 2026-08-26: patched: Patch merged in GitHub PR #7814