Samsung /dev/tsmux Heap Out-Of-Bounds Write

The Samsung kernel suffers from a heap out-of-bounds write in /dev/tsmux.