← CVE Radar
CVE-2021-25395Samsung Mobile Devices Race Condition Vulnerability
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.
6.4 MEDIUMEPSS 0.36%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.4 | MEDIUM | 3.1Samsung Mobile (CNA) | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H |
| 4.4 | MEDIUM | 2.0NVD | AV:L/AC:M/Au:N/C:P/I:P/A:P |
CISA required action
⚡ Known exploited · remediation due Jul 20, 2023
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
Details
- CVE ID
- CVE-2021-25395
- Status
- Analyzed
- Assigner (CNA)
- Samsung Mobile
- Published
- Jun 11, 2021
- Last modified
- 2026-06-17 03:42 UTC
- Weaknesses
- CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected Products
As published by the CNA in the CVE record.
Samsung MobileSamsung Mobile Devices1 version range
- O(8.x), P(9.0), Q(10.0), R(11.0) before SMR MAY-2021 Release 1