ACTIEF MISBRUIKT
CVE-2021-25370: Samsung Mobile Devices Memory Corruption Vulnerability
| Leverancier | Samsung |
|---|---|
| Product | Mobile Devices |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 8 nov 2022 |
| CISA-deadline (Amerikaanse overheid) | 29 nov 2022 |
| Zwakte (CWE) | CWE-416 |
Vereiste actie (tekst van CISA, Engels)
Apply updates per vendor instructions.
Beschrijving (NVD, Engels)
Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.
BRONNEN
Andere lekken bij Samsung
- CVE-2024-7399: Samsung MagicINFO 9 Server Path Traversal Vulnerability
- CVE-2025-21042: Samsung Mobile Devices Out-of-Bounds Write Vulnerability
- CVE-2025-21043: Samsung Mobile Devices Out-of-Bounds Write Vulnerability
- CVE-2025-4632: Samsung MagicINFO 9 Server Path Traversal Vulnerability
- CVE-2022-22265: Samsung Mobile Devices Use-After-Free Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.