CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-03-26
Samsung Galaxy DSP Driver Arbitrary ELF Library Loading Vulnerability (CVE-2021-25371) Analysis and Mitigation Guide
[Affected Scope] Samsung devices equipped with DSP (Digital Signal Processor) driver prior to SMR (Security Maintenance Release) Mar-2021 Release 1
[Impact] A local attacker with high privileges can load arbitrary ELF libraries inside the DSP subsystem, potentially leading to complete system compromise and evasion of OS-level security controls
[Mitigation] Immediately apply the official Samsung security update (SMR Mar-2021 Release 1 or later)