PT-2021-16663 · Systemui · Systemui

Published 2021-10-06 · Updated 2021-10-13 · CVE-2021-25473

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: SystemUI versions prior to SMR Oct-2021 Release 1

Description: The issue is related to improper exception handling for the multi sim bar hide by meadia full value in SystemUI. This can be exploited by an attacker who has gained shell privilege to cause a permanent denial of service in the user device, which would require a factory reset to resolve.

Recommendations: For versions prior to SMR Oct-2021 Release 1, as a temporary workaround, consider restricting access to the SystemUI component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2021-25473

Affected Products

Systemui

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-25473 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-25473 · Vendor Advisory