Firetruck

CVE-2021-25487

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Samsung Mobile DevicesSamsung Mobile / Samsung Mobile Devices>= O(8.1), P(9.0), Q(10.0), R(11.0), < SMR Oct-2021 Release 1affected