VULNERABILITY INTELLIGENCE

CVE-2021-25339

CVSS score4.4 MEDIUM
EPSS probability0.12%
CISA KEVNot currently listed
Published2021-03-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L

Description

Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to corrupt EL2 memory.

Weakness classification

  • mobile.security@samsung.com: CWE-20
  • nvd@nist.gov: CWE-20

Primary references