CVE-2021-25372: medium-severity vulnerability in Samsung Mobile Devices
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
The DSP driver fails to properly check memory boundaries, allowing an attacker to access data outside the intended memory area. This can lead to information disclosure or system instability.
An improper boundary check vulnerability in the DSP driver permits out-of-bounds memory access. An attacker with local access to the DSP driver interface can bypass boundary validation to read or write memory outside allocated regions, potentially leading to information disclosure or denial of service.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.