CVE-2021-25415: Input Validation
Published Jun 11, 2021
·Updated
Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memory as writable.
Affected Software
6 affected components
Google Android=10.0
Google Android=11.0
Samsung Exynos 9610
Samsung Exynos 9810
Samsung Exynos 9820
Samsung Exynos 9830
Event History
Jun 11, 2021
CVE Published
via MITRE·02:33 PM
Data Sourced
via MITRE·02:33 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-25415.
2
What is the severity of CVE-2021-25415?
The severity of CVE-2021-25415 is medium (5.5).
3
Which software versions are affected by CVE-2021-25415?
CVE-2021-25415 affects Google Android 10.0 and 11.0.
4
How can local attackers exploit CVE-2021-25415?
Local attackers can exploit CVE-2021-25415 by remapping EL2 memory as writable after assuming EL1 is compromised.
5
Where can I find more information about CVE-2021-25415?
You can find more information about CVE-2021-25415 at the following link: [https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=6](https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=6).