CVE-2021-25489: Samsung Mobile Devices Improper Input Validation Vulnerability
First published: Wed Oct 06 2021(Updated: )
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.
Credit: mobile.security@samsung.com mobile.security@samsung.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | =8.1 | |
| Google Android | =9.0 | |
| Google Android | =10.0 | |
| Google Android | =11.0 | |
| Samsung Exynos | ||
| Samsung mobile devices | ||
| All of | ||
| Any of | ||
| Google Android | =8.1 | |
| Google Android | =9.0 | |
| Google Android | =10.0 | |
| Google Android | =11.0 | |
| Samsung Exynos |
Remedy
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Samsung mobile devices vulnerability?
The vulnerability ID for this Samsung mobile devices vulnerability is CVE-2021-25489.
What is the title of the vulnerability?
The title of the vulnerability is 'Samsung Mobile Devices Improper Input Validation Vulnerability'.
What is the description of the vulnerability?
The vulnerability involves an improper input validation vulnerability within the modem interface driver of Samsung mobile devices, which can result in a format string bug leading to kernel panic.
Which software is affected by this vulnerability?
The vulnerability affects Samsung mobile devices.
How can I learn more about this vulnerability?
You can learn more about this vulnerability by visiting the reference link provided: [Samsung Mobile Security Updates](https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10)
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/description
- agent/remedy
- agent/title
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/event
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- collector/nvd-cve
- source/NVD
- agent/references
- vendor/google
- canonical/google android
- version/google android/8.1
- version/google android/9.0
- version/google android/10.0
- version/google android/11.0
- vendor/samsung
- canonical/samsung exynos
- canonical/samsung mobile devices