CVE Watch—

CVE-2021-25487

Samsung Mobile Devices Out-of-Bounds Read Vulnerability

CVSS

—

No CVSS

EPSS

0.6%

p45

KEV

YES

Jun 29, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

0.6%EPSS · 30 days0.6%

2026-06-302026-07-17

KEV catalog record

Product

Samsung / Mobile Devices

Vulnerability

Samsung Mobile Devices Out-of-Bounds Read Vulnerability

Added to KEV

Jun 29, 2023

Remediate by

Jul 20, 2023

Known ransomware use

Summary description

Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

Notes

https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://nvd.nist.gov/vuln/detail/CVE-2021-25487

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-21042—

95.6%

KEV—79Samsung Mobile Devices Out-of-Bounds Write Vulnerability—CVE-2021-25337—

85.0%

KEV—76Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2023-21492—

83.3%

KEV—75Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability—CVE-2025-21043—

70.1%

KEV—71Samsung Mobile Devices Out-of-Bounds Write Vulnerability—CVE-2021-25369—

62.6%

KEV—69Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2021-25370—

55.3%

KEV—67Samsung Mobile Devices Memory Corruption Vulnerability—