CVE-2021-25371 · netVigilance record NV23-0092
Samsung Mobile Devices Unspecified
past due
What to do
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
CISA deadline 2023-07-20 · passed 3 years 1 month ago · applies to US federal civilian agencies; used elsewhere as a reference SLA
What happened
Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.
Who is affected
Samsung Mobile Devices. Affected version ranges are listed in the vendor advisory and the NVD entry linked under Sources.
Weakness class: CWE-912.
Timeline
- Added to CISA KEVExploitation in the wild confirmed by CISA
- CISA remediation deadlinepassed 3 years 1 month ago
Sources
- NVD entry for CVE-2021-25371 nvd.nist.gov/vuln/detail/CVE-2021-25371
- CISA Known Exploited Vulnerabilities catalog www.cisa.gov/known-exploited-vulnerabilities-catalog
- security.samsungmobile.com security.samsungmobile.com/securityUpdate.smsb?year=2021&month=3
- nvd.nist.gov nvd.nist.gov/vuln/detail/CVE-2021-25371