CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Samsung DSP Driver Out-of-Bounds Memory Access Local Privilege Escalation (CVE-2021-25372)
[Affected Scope] Samsung mobile devices with DSP (Digital Signal Processor) driver prior to SMR Mar-2021 Release 1
[Impact] Local attackers can exploit improper boundary checks to gain out-of-bounds memory access, leading to local privilege escalation and arbitrary code execution in kernel space
[Mitigation] Apply the official Samsung security update to SMR Mar-2021 Release 1 or later
Samsung Galaxy DSP Driver Arbitrary ELF Library Loading Vulnerability (CVE-2021-25371) Analysis and Mitigation Guide
[Affected Scope] Samsung devices equipped with DSP (Digital Signal Processor) driver prior to SMR (Security Maintenance Release) Mar-2021 Release 1
[Impact] A local attacker with high privileges can load arbitrary ELF libraries inside the DSP subsystem, potentially leading to complete system compromise and evasion of OS-level security controls
[Mitigation] Immediately apply the official Samsung security update (SMR Mar-2021 Release 1 or later)