PT-2021-16671 · Samsung · Exynos Cp Booting Driver

Published 2021-10-06 · Updated 2021-10-13 · CVE-2021-25481

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Exynos CP booting driver versions prior to SMR Oct-2021 Release 1

Description: The issue is related to improper error handling in the Exynos CP booting driver, which allows local attackers to bypass the Secure Memory Protector of Exynos CP Memory. This could potentially lead to unauthorized access to sensitive memory areas.

Recommendations: For versions prior to SMR Oct-2021 Release 1, update to SMR Oct-2021 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Exynos CP booting driver to minimize the risk of exploitation.

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

CVE-2021-25481

Affected Products

Exynos Cp Booting Driver

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-25481 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-25481 · Vendor Advisory
• https://t.me/cvenotify/22001 · Telegram Post
• https://t.me/cibsecurity/30102 · Telegram Post