CVE-2021-25383: Buffer Overflow

Published Jun 11, 2021

Updated

An improper input validation vulnerability in scmnmfalread() in libsapeextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.

Affected Software

4 affected components

Google Android=8.1

Google Android=9.0

Google Android=10.0

Google Android=11.0

Event History

Jun 11, 2021

CVE Published

via MITRE·02:45 PM

Data Sourced

via MITRE·02:45 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-25383?

CVE-2021-25383 has been classified as a high severity vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2021-25383?

To mitigate CVE-2021-25383, ensure that you update your Android device to the latest software version provided by your manufacturer.

What types of devices are affected by CVE-2021-25383?

CVE-2021-25383 affects Android devices running versions 8.1, 9.0, 10.0, and 11.0.

What are the potential impacts of CVE-2021-25383?

Exploitation of CVE-2021-25383 could allow an attacker to execute arbitrary code, potentially compromising the device's integrity.

Who is responsible for addressing CVE-2021-25383?

Vendors such as Google and device manufacturers are responsible for issuing updates that address CVE-2021-25383.