CVE-2021-25411: Input Validation
Published Jun 11, 2021
·Updated
Improper address validation vulnerability in RKP api prior to SMR JUN-2021 Release 1 allows root privileged local attackers to write read-only kernel memory.
Affected Software
6 affected components
Google Android=10.0
Google Android=11.0
Samsung Exynos 9610
Samsung Exynos 9810
Samsung Exynos 9820
Samsung Exynos 9830
Event History
Jun 11, 2021
CVE Published
via MITRE·02:33 PM
Data Sourced
via MITRE·02:33 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-25411.
2
What is the severity of CVE-2021-25411?
The severity of CVE-2021-25411 is medium with a CVSS score of 4.4.
3
Which software is affected by CVE-2021-25411?
Google Android versions 10.0 and 11.0 are affected by CVE-2021-25411.
4
How can root privileged local attackers exploit CVE-2021-25411?
Root privileged local attackers can exploit CVE-2021-25411 by writing to read-only kernel memory.
5
Is Samsung Exynos 9610, 9810, 9820, or 9830 vulnerable to CVE-2021-25411?
No, Samsung Exynos 9610, 9810, 9820, and 9830 are not vulnerable to CVE-2021-25411.
6
Where can I find more information about CVE-2021-25411?
You can find more information about CVE-2021-25411 at the following link: [https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=6](https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=6)