CVE-2025-20881

Summary

CVE-2025-20881 is a serious vulnerability affecting libsthmbc.so in which an out-of-bounds write issue is discovered prior to the SMR Jan-2025 Release 1. This weakness allows local attackers to exploit the buffer storing decoded video frames and execute arbitrary code with elevated privileges. User interaction is necessary to trigger this vulnerability, making it a potential threat to systems where users may open maliciously crafted multimedia files.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.