CVE-2021-25338

MEDIUM

Samsung mobile <SMR Mar-2021 Release 1 - Memory Corruption

Title source: llm

Description

Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to write certain part of RKP EL2 memory region.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://security.samsungmobile.com/securityUpdate.smsb

Vendor Advisory x_refsource_misc

https://security.samsungmobile.com

Scores

CVSS v3 4.4

EPSS 0.0012

EPSS Percentile 2.3%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L

Details

CWE

CWE-20

Status published

Products (2)

google/android 10.0

google/android 11.0

Published Mar 04, 2021

Tracked Since Feb 18, 2026