CVE-2021-25408: Buffer Overflow
Published Jun 11, 2021
·Updated
A possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write and code execution.
Affected Software
7 affected components
Google Android=9.0
Google Android=10.0
Google Android=11.0
Samsung Exynos 2100
Samsung Exynos 980
Samsung Exynos 9820
Samsung Exynos 9830
Event History
Jun 11, 2021
CVE Published
via MITRE·02:33 PM
Data Sourced
via MITRE·02:33 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2021-25408?
CVE-2021-25408 is a buffer overflow vulnerability in the NPU driver that allows arbitrary memory write and code execution.
2
Which software versions are affected by CVE-2021-25408?
Google Android versions 9.0, 10.0, and 11.0 are affected by CVE-2021-25408.
3
What is the severity of CVE-2021-25408?
CVE-2021-25408 has a severity score of 7.8 (high).
4
How can I fix CVE-2021-25408?
To fix CVE-2021-25408, update your NPU driver to the SMR JUN-2021 Release 1 or later version.
5
Where can I find more information about CVE-2021-25408?
You can find more information about CVE-2021-25408 in the Samsung Mobile Security Updates for June 2021.