- Vendor / Project
- Samsung
- Product
- Mobile Devices
- Date added
- Nov 8, 2022
- Due date
- Nov 29, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-200
Description
Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25370.
Required action
Apply updates per vendor instructions.