CVE-2021-25372

MEDIUM KEV

DSP driver <SMR Mar-2021 Release 1 - Memory Corruption

Title source: llm

Description

An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.

References (3)

Scores

CVSS v3 6.1
EPSS 0.0176
EPSS Percentile 82.6%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CISA KEV 2023-06-29
VulnCheck KEV 2020-12-22
InTheWild.io 2020-12-22
ENISA EUVD EUVD-2021-12268
CWE
CWE-703 CWE-787
Status published
Products (2)
samsung/android 10.0 smr-feb-2021-r1 (2 CPE variants)
samsung/android 11.0 smr-feb-2021-r1 (2 CPE variants)
Published Mar 26, 2021
KEV Added Jun 29, 2023
Tracked Since Feb 18, 2026