CVE-2021-25436: Input Validation
Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code execution via Samsung Accessory Protocol.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-25436?
CVE-2021-25436 has been classified as a critical severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2021-25436?
To fix CVE-2021-25436, update your Tizen software to the JUL-2021 Release version or later that addresses this vulnerability.
What versions of Tizen are affected by CVE-2021-25436?
CVE-2021-25436 affects Tizen versions prior to 5.5 and specifically those before the JUL-2021 Release.
What type of vulnerability is CVE-2021-25436?
CVE-2021-25436 is an improper input validation vulnerability that allows for arbitrary code execution.
Who is affected by CVE-2021-25436?
Users of Tizen devices that utilize the Firmware Over-The-Air (FOTA) service before the JUL-2021 Release are affected by CVE-2021-25436.