cve-2021-25370

MEDIUM CVSS 6.1 cisa_known_exploited
Description

Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.

Timeline
Published
2022-11-08
Last Modified
2022-11-08
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 6.1,
  "datePublished": "2022-11-08",
  "dateUpdated": "2022-11-08",
  "description": "Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.",
  "dueDate": "2022-11-29",
  "id": "CVE-2021-25370",
  "kev_catalogs": [
    "cisa"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25370",
  "product": "Mobile Devices",
  "requiredAction": "Apply updates per vendor instructions.",
  "severity": "MEDIUM",
  "source": "cisa_known_exploited",
  "title": "Samsung Mobile Devices Memory Corruption Vulnerability",
  "vendor": "Samsung"
}
Enrichment data
View JSON API Download JSON