PT-2021-15104 · Samsung · Samsung Mobile Devices

Published 2021-01-05 · Updated 2021-01-08 · CVE-2021-22495

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O(8.x) through R(11.0)

Description An issue was discovered in the Mali GPU driver of Samsung mobile devices, allowing out-of-bounds access and potentially causing a device reset.

Recommendations For Samsung mobile devices with O(8.x) through R(11.0), update the Mali GPU driver to prevent out-of-bounds access and device resets. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-22495

Affected Products

Samsung Mobile Devices

References · 4

• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-22495 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22495 · Security Note
• https://t.me/cibsecurity/21603 · Telegram Post