CVE-2021-25487: high-severity vulnerability in Samsung Mobile Devices
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
A modem driver fails to check buffer boundaries, allowing someone to read memory beyond intended limits and potentially execute malicious code by manipulating function pointers.
CWE-125 out-of-bounds read in set_skb_priv() function lacks input validation on buffer operations, enabling information disclosure and arbitrary code execution through invalid function pointer dereference. Exploitation requires interaction with the modem interface driver prior to SMR Oct-2021 Release 1 patches.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.