CVE-2021-25370
Samsung Mobile Devices Memory Corruption Vulnerability
CVSS
—
Sem CVSS
EPSS
0.9%
p60
KEV
SIM
8 de nov. de 2022
Exploit Today
68
0-100
Publicado: — · Última mod.: —
Produto
Samsung / Mobile Devices
Vulnerabilidade
Samsung Mobile Devices Memory Corruption Vulnerability
Adicionado ao KEV
8 de nov. de 2022
Corrigir até
29 de nov. de 2022
Uso conhecido em ransomware
Não
Descrição resumida
Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.
Ação necessária
Apply updates per vendor instructions.
Notas
https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25370