CVE-2021-25489 — Samsung Mobile Devices Improper Input Validation Vulnerability

provenance: imported · CVE: CVE-2021-25489

CVE-2021-25489: Samsung Mobile Devices Improper Input Validation Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Samsung
Product	Mobile Devices
Date added	2023-06-29
Due date	2023-07-20
Ransomware campaign use	Unknown

Description

Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.

Required action (CISA)

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

Notes

https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://nvd.nist.gov/vuln/detail/CVE-2021-25489

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-25489
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog