CVE-2021-25394: Samsung Mobile Devices Race Condition Vulnerability
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.
Other sources
Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
If vendor updates are unavailable, discontinue use of affected Samsung mobile devices affected by the MFC charger driver vulnerability (i.e., stop using the impacted devices) to avoid exploitation.
Event History
Frequently Asked Questions
What is CVE-2021-25394?
CVE-2021-25394 is a race condition vulnerability found in Samsung mobile devices' MFC charger driver.
What is the impact of CVE-2021-25394?
The vulnerability allows for a use-after-free condition, potentially leading to unauthorized write access when a radio privilege is compromised.
Which products are affected by CVE-2021-25394?
Samsung mobile devices are affected by CVE-2021-25394.
How can I fix CVE-2021-25394?
Samsung has released a security update to address the vulnerability. Please refer to the official Samsung Mobile Security website for the relevant update.
Where can I find more information about CVE-2021-25394?
You can find more information about CVE-2021-25394 on the official Samsung Mobile Security website.