CVE-2021-25487
Samsung Mobile Devices Out-of-Bounds Read Vulnerability
CVSS
—
Sem CVSS
EPSS
0.6%
p51
KEV
SIM
29 de jun. de 2023
Exploit Today
65
0-100
Publicado: — · Última mod.: —
Produto
Samsung / Mobile Devices
Vulnerabilidade
Samsung Mobile Devices Out-of-Bounds Read Vulnerability
Adicionado ao KEV
29 de jun. de 2023
Corrigir até
20 de jul. de 2023
Uso conhecido em ransomware
Não
Descrição resumida
Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.
Ação necessária
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
Notas
https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://nvd.nist.gov/vuln/detail/CVE-2021-25487