Vendor / Project: Samsung Product: Mobile Devices Description: Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369. Required Action: Apply updates per vendor instructions. Due Date: 2022-11-29 Ransomware Campaign Use: Unknown CWEs: CWE-416 Notes: https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25370
CVE-2021-25370 — Samsung Mobile Devices Memory Corruption Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2022-11-08 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 6.2
- Quelle-ID:
cisa_kev - uid_hash:
591803db7f07a57031cd7de055c4ce0d762ab2ad051d5c29cb80763798affe04
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
MEDIUM |
6.2 |
MEDIUM |
4.4 |
2021-03-04 |
|||
MEDIUM |
6.2 |
MEDIUM |
6.2 |
2021-03-26 |
|||
MEDIUM |
6.2 |
MEDIUM |
6.1 |
2021-03-26 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |