PT-2021-16563 · Samsung · Samsung Mobile Devices

Published 2021-03-26 · Updated 2025-10-30 · CVE-2021-25372

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Devices versions prior to SMR Mar-2021 Release 1

Description: The issue is related to an improper boundary check in the DSP driver, which allows out of bounds memory access. This can potentially lead to unauthorized access or other security issues. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations: For Samsung Mobile Devices versions prior to SMR Mar-2021 Release 1, update to SMR Mar-2021 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the DSP driver until a patch is available.

Fix

Memory Corruption

Weakness Enumeration

CWE-703

CWE-787

Related Identifiers

CVE-2021-25372

Affected Products

Samsung Mobile Devices

References · 8

• https://security.samsungmobile.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-25372 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25372 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=3 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://t.me/cvenotify/111432 · Telegram Post
• https://t.me/cveNotify/140975 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25372 · Note