CVE-2021-25370

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25370

Remediation deadline: November 29, 2022

Description

Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.

Timeline

Published:November 8th, 2022 12:00 AM

Last modified:November 8th, 2022 12:00 AM

Added to KEV:November 8th, 2022

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Samsung

Products

Mobile Devices

Weaknesses (CWE)

CWE-416

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute