← CVE Radar
CVE-2021-25487Samsung Mobile Devices Out-of-Bounds Read Vulnerability
Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.
7.3 HIGHEPSS 0.63%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.3 | HIGH | 3.1Samsung Mobile (CNA) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N |
Details
- CVE ID
- CVE-2021-25487
- Status
- Published
- Assigner (CNA)
- Samsung Mobile
- Published
- Oct 6, 2021
- Last modified
- 2025-10-21 23:25 UTC
- Weaknesses
- CWE-125 · Out-of-bounds Read
Affected Products
As published by the CNA in the CVE record.
Samsung MobileSamsung Mobile Devices1 version range
- O(8.1), P(9.0), Q(10.0), R(11.0) before SMR Oct-2021 Release 1
References
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS