CVE-2021-25372 — Samsung Mobile Devices Improper Boundary Check Vulnerability
CVE-2021-25372: Samsung Mobile Devices Improper Boundary Check Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Samsung |
| Product | Mobile Devices |
| Date added | 2023-06-29 |
| Due date | 2023-07-20 |
| Ransomware campaign use | Unknown |
Description
Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.
Required action (CISA)
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
Notes
https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=3; https://nvd.nist.gov/vuln/detail/CVE-2021-25372
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-25372
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog