PT-2021-16664 · Systemui · Systemui

Published 2021-10-06 · Updated 2021-10-13 · CVE-2021-25474

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: SystemUI versions prior to SMR Oct-2021 Release 1

Description: An issue with improper exception handling for the multi sim bar show on qspanel value in SystemUI allows an attacker, assuming shell privilege is gained, to cause a permanent denial of service in the user device. This condition persists until a factory reset is performed.

Recommendations: For versions prior to SMR Oct-2021 Release 1, as a temporary workaround, consider restricting access to the SystemUI to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2021-25474

Affected Products

Systemui

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-25474 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-25474 · Vendor Advisory
• https://t.me/cibsecurity/30095 · Telegram Post