low3.3Known exploited
CVE-2021-25489
Samsung Mobile Devices Improper Input Validation Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2023-06-29. Federal due date: 2023-07-20.
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
Impact
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Android | Versions 8.1, 9.0, 10.0, 11.0 |