Skip to content
feed: live
>_0dayNews
CVE Record
[ MEDIUM ]CVE-2021-25370

Samsung Mobile Devices Memory Corruption Vulnerability

Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.

cat cve-2021-25370.json
Vendor
Samsung
Product
Mobile Devices
CVSS
6.1
EPSS (exploit probability)
0.9%
Status
kev
CISA patch-by (BOD 22-01)
Published
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-25370

Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.

Added to CISA’s Known Exploited Vulnerabilities catalog on 2022-11-08. Required action per CISA: Apply updates per vendor instructions. Due date: 2022-11-29.

This is an auto-synced KEV catalog record pending a full 0dayNews write-up — see CISA’s KEV catalog and the NVD record linked above for primary sources.