PT-2021-7535 · Google+1 · Android+1

Published 2021-03-26 · Updated 2025-10-30 · CVE-2021-25370

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung Mobile Devices (affected versions not specified)

Description The issue is related to the use of memory after it has been freed when handling file descriptors in the Display and Enhancement Controller (DECON) driver of the Display Processing Unit (DPU) module in Samsung Android mobile devices. This can be exploited to allow an attacker to read, modify, or delete files, or cause a denial of service. The problem is due to an incorrect implementation of file descriptor handling in the dpu driver.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Use After Free

Weakness Enumeration

CWE-703

CWE-787

CWE-416

Related Identifiers

BDU:2022-07369

CVE-2021-25370

Affected Products

Android

Samsung Mobile Devices

References · 16

• https://security.samsungmobile.com · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-07369 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-25370 · Security Note
• https://osv.dev/vulnerability/CVE-2021-25370 · Vendor Advisory
• https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html · Note
• https://t.me/cybersecuritytechnologies/7108 · Telegram Post
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory, Security Note
• https://source.android.com/docs/security/bulletin · Note
• https://t.me/ckured/212 · Telegram Post
• https://t.me/cveNotify/140973 · Telegram Post
• https://t.me/freedomf0x/18248 · Telegram Post
• https://t.me/ckure/11920 · Telegram Post
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://t.me/pentestingnews/29852 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25370 · Note