Firetruck

CVE-2021-25394

KEV

Samsung Mobile Devices Race Condition Vulnerability

View CVE record →
Vendor / Project
Samsung
Product
Mobile Devices
Date added
Jun 29, 2023
Due date
Jul 20, 2023
Known ransomware use
Unknown
CWEs
CWE-416

Description

Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

Notes