CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Samsung Exynos Modem Interface Driver Format String Vulnerability (CVE-2021-25489) Technical Advisory
[Affected Scope] Samsung mobile devices and Exynos modem-powered hardware running firmware versions prior to SMR (Security Maintenance Release) Oct-2021 Release 1
[Impact] Local attackers with radio permissions can exploit missing input validation and a format string bug to trigger kernel panic and system-wide Denial of Service (DoS)
[Mitigation] Apply the Samsung SMR October 2021 Release 1 (or later) firmware update immediately and restrict unauthorized applications from acquiring radio permissions
Samsung Modem Interface Driver Out-of-Bounds Read Vulnerability (CVE-2021-25487)
[Affected Scope] Samsung mobile devices and Exynos modem interface drivers prior to SMR Oct-2021 Release 1
[Impact] Local attackers can execute arbitrary code with kernel privileges by dereferencing an invalid function pointer, leading to complete system compromise
[Mitigation] Immediately apply the official Samsung Android security update (October 2021 or later)