MEDIUM

CVE-2021-25372

Samsung Android 2021-03-26 CVSS v3.1

CVSS

6.7

KEV

Description

An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.

Summary dbcve.org

This is a memory safety vulnerability in a Samsung DSP (Digital Signal Processor) driver where improper boundary checking allows out-of-bounds memory access. The flaw exists in versions prior to the SMR March 2021 Release 1 update, potentially allowing attackers to read or write beyond allocated buffer boundaries.

Mitigation

Apply the Samsung SMR March 2021 Release 1 or later security update, which contains the proper boundary check fix for the DSP driver.

Weakness (CWE)

CWE-787 Out-of-bounds Write

CWE-703

EPSS Score

0.8%

Probability of exploitation in next 30 days

54.8th percentile

References

https://security.samsungmobile.com Vendor Advisory https://security.samsungmobile.com/securityUpdate.smsb Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25372 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE