CVE-2021-25394 — Samsung Mobile Devices Race Condition Vulnerability
CVE-2021-25394: Samsung Mobile Devices Race Condition Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Samsung |
| Product | Mobile Devices |
| Date added | 2023-06-29 |
| Due date | 2023-07-20 |
| Ransomware campaign use | Unknown |
Description
Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
Required action (CISA)
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
Notes
https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5; https://nvd.nist.gov/vuln/detail/CVE-2021-25394
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-25394
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog