cve-2021-25370
MEDIUM CVSS 6.1 cisa_known_exploited
Description
Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.
Timeline
- Published
- 2022-11-08
- Last Modified
- 2022-11-08
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cvss": 6.1,
"datePublished": "2022-11-08",
"dateUpdated": "2022-11-08",
"description": "Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.",
"dueDate": "2022-11-29",
"id": "CVE-2021-25370",
"kev_catalogs": [
"cisa"
],
"knownRansomwareCampaignUse": "Unknown",
"notes": "https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25370",
"product": "Mobile Devices",
"requiredAction": "Apply updates per vendor instructions.",
"severity": "MEDIUM",
"source": "cisa_known_exploited",
"title": "Samsung Mobile Devices Memory Corruption Vulnerability",
"vendor": "Samsung"
}
Enrichment data
Aggregated bundle (all enrichments)