CVE-2021-25394
Samsung Mobile Devices Race Condition Vulnerability
CVSS
—
Sem CVSS
EPSS
0.4%
p35
KEV
SIM
29 de jun. de 2023
Exploit Today
60
0-100
Publicado: — · Última mod.: —
Produto
Samsung / Mobile Devices
Vulnerabilidade
Samsung Mobile Devices Race Condition Vulnerability
Adicionado ao KEV
29 de jun. de 2023
Corrigir até
20 de jul. de 2023
Uso conhecido em ransomware
Não
Descrição resumida
Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
Ação necessária
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
Notas
https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5; https://nvd.nist.gov/vuln/detail/CVE-2021-25394