CVE-2021-25394

Summary dbcve.org

A use-after-free vulnerability exists in the MFC charger driver due to a race condition. An attacker who has compromised radio privilege can exploit this race condition to achieve arbitrary write primitive, potentially leading to privilege escalation or system compromise.

Mitigation

Update the device firmware to SMR MAY-2021 Release 1 or later, which contains the patched MFC charger driver addressing the race condition and use-after-free vulnerability.