CVE-2021-25481: Medium severity android vulnerability

Published Oct 6, 2021

Updated

An improper error handling in Exynos CP booting driver prior to SMR Oct-2021 Release 1 allows local attackers to bypass a Secure Memory Protector of Exynos CP Memory.

Affected Software

5 affected components

Google Android=8.1

Google Android=9.0

Google Android=10.0

Google Android=11.0

Samsung Exynos

Event History

Oct 6, 2021

CVE Published

via MITRE·05:09 PM

Data Sourced

via MITRE·05:09 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-25481?

CVE-2021-25481 refers to an improper error handling vulnerability in the Exynos CP booting driver.

What is the severity of CVE-2021-25481?

The severity of CVE-2021-25481 is medium with a CVSS score of 6.7.

Which software is affected by CVE-2021-25481?

Google Android versions 8.1, 9.0, 10.0, and 11.0 are affected by CVE-2021-25481.

How can local attackers exploit CVE-2021-25481?

Local attackers can exploit CVE-2021-25481 to bypass the Secure Memory Protector of Exynos CP Memory.

Is Samsung Exynos vulnerable to CVE-2021-25481?

No, Samsung Exynos is not vulnerable to CVE-2021-25481.

How can I fix CVE-2021-25481?

To fix CVE-2021-25481, users should apply the SMR Oct-2021 Release 1 security update provided by Samsung or the respective device manufacturer.

Where can I find more information about CVE-2021-25481?

More information about CVE-2021-25481 can be found at the Samsung Mobile Security website: [link](https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10)