CVE Watch—

CVE-2021-25370

Samsung Mobile Devices Memory Corruption Vulnerability

CVSS

—

No CVSS

EPSS

0.9%

p55

KEV

YES

Nov 8, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

0.9%EPSS · 30 days0.9%

2026-06-302026-07-16

KEV catalog record

Product

Samsung / Mobile Devices

Vulnerability

Samsung Mobile Devices Memory Corruption Vulnerability

Added to KEV

Nov 8, 2022

Remediate by

Nov 29, 2022

Known ransomware use

Summary description

Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.

Required action

Apply updates per vendor instructions.

Notes

https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25370

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-21042—

95.6%

KEV—79Samsung Mobile Devices Out-of-Bounds Write Vulnerability—CVE-2021-25337—

85.0%

KEV—76Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2023-21492—

83.3%

KEV—75Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability—CVE-2025-21043—

70.1%

KEV—71Samsung Mobile Devices Out-of-Bounds Write Vulnerability—CVE-2021-25369—

62.5%

KEV—69Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2021-25372—

52.6%

KEV—66Samsung Mobile Devices Improper Boundary Check Vulnerability—