CVE Watch—

CVE-2021-25369

Samsung Mobile Devices Improper Access Control Vulnerability

CVSS

—

Sem CVSS

EPSS

1.1%

p65

KEV

SIM

8 de nov. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

1.1%EPSS · 30 dias1.1%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Samsung / Mobile Devices

Vulnerabilidade

Samsung Mobile Devices Improper Access Control Vulnerability

Adicionado ao KEV

8 de nov. de 2022

Corrigir até

29 de nov. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25370.

Ação necessária

Apply updates per vendor instructions.

Notas

https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25369

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-210438.8 ALT

82.7%

KEV—75Samsung Mobile Devices Out-of-Bounds Write Vulnerability28d CVE-2025-210428.8 ALT

98.5%

KEV—80Samsung Mobile Devices Out-of-Bounds Write Vulnerability29d CVE-2021-25337—

86.6%

KEV—76Samsung Mobile Devices Improper Access Control Vulnerability—CVE-2023-21492—

85.1%

KEV—76Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability—CVE-2021-25370—

59.5%

KEV—68Samsung Mobile Devices Memory Corruption Vulnerability—CVE-2021-25372—

56.9%

KEV—67Samsung Mobile Devices Improper Boundary Check Vulnerability—