CVE-2021-25489 - Samsung Mobile Devices Improper Input Validation Vulnerability

Vulnerability Name

Samsung Mobile Devices Improper Input Validation Vulnerability

Description

Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

Additional Notes

https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10

https://nvd.nist.gov/vuln/detail/CVE-2021-25489