CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Samsung NPU Driver Arbitrary Memory Write and Local Privilege Escalation (CVE-2022-22265) Technical Advisory
[Affected Scope] Samsung mobile devices running NPU (Neural Processing Unit) driver prior to SMR Jan-2022 Release 1
[Impact] Local attackers can exploit improper handling of exceptional conditions to perform arbitrary memory writes and execute code with kernel privileges
[Mitigation] Apply the official Samsung security update to upgrade the system firmware to January 2022 or later
Samsung DSP Driver Out-of-Bounds Memory Access Local Privilege Escalation (CVE-2021-25372)
[Affected Scope] Samsung mobile devices with DSP (Digital Signal Processor) driver prior to SMR Mar-2021 Release 1
[Impact] Local attackers can exploit improper boundary checks to gain out-of-bounds memory access, leading to local privilege escalation and arbitrary code execution in kernel space
[Mitigation] Apply the official Samsung security update to SMR Mar-2021 Release 1 or later
Samsung Mobile DPU Driver File Descriptor Handling Memory Corruption Vulnerability (CVE-2021-25370)
[Affected Scope] Samsung mobile devices with DPU (Display Processing Unit) driver prior to SMR (Samsung Maintenance Release) Mar-2021 Release 1
[Impact] A local attacker with high privileges can trigger improper file descriptor handling, leading to kernel memory corruption and system-wide kernel panic (DoS/LPE)
[Mitigation] Immediately apply the official Samsung Android security update (SMR March 2021 Release 1 or later)