CVE-2021-25371

MEDIUM KEV

DSP driver <SMR Mar-2021 Release 1 - Code Injection

Title source: llm

Description

A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.

References (3)

Scores

CVSS v3 6.1
EPSS 0.0162
EPSS Percentile 81.9%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CISA KEV 2023-06-29
VulnCheck KEV 2020-12-22
InTheWild.io 2020-12-22
ENISA EUVD EUVD-2021-12267
CWE
CWE-912
Status published
Products (2)
samsung/android 10.0 smr-feb-2021-r1 (2 CPE variants)
samsung/android 11.0 smr-feb-2021-r1 (2 CPE variants)
Published Mar 26, 2021
KEV Added Jun 29, 2023
Tracked Since Feb 18, 2026