CVE-2021-25479: Buffer Overflow
A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in :2022-03-05 - Upgrade
Upgrade
Exynos CP Chipsetto a version that resolves this vulnerability.Fixed in SMR Oct-2021 Release 1
Event History
Frequently Asked Questions
What is the vulnerability ID for this heap-based buffer overflow vulnerability?
The vulnerability ID for this heap-based buffer overflow vulnerability is CVE-2021-25479.
What is the severity level of CVE-2021-25479?
The severity level of CVE-2021-25479 is high.
What is the affected software for CVE-2021-25479?
The affected software for CVE-2021-25479 is Google Android versions 8.1, 9.0, 10.0, and 11.0, and Samsung Exynos Chipset.
What is the impact of CVE-2021-25479?
CVE-2021-25479 allows arbitrary memory write and code execution.
How can I fix this vulnerability?
To fix this vulnerability, apply the SMR Oct-2021 Release 1 security update from Samsung Mobile.