VULNERABILITY INTELLIGENCE

CVE-2021-25487

CVSS score7.3 HIGH
EPSS probability0.64%
CISA KEVKnown exploited vulnerability
Published2021-10-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Known Exploited Vulnerability

Samsung Mobile Devices Out-of-Bounds Read Vulnerability

Vendor / product: Samsung / Mobile Devices

Description

Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.

Weakness classification

  • mobile.security@samsung.com: CWE-125
  • nvd@nist.gov: CWE-125

Primary references