CVE-2021-25339

Summary

Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to corrupt EL2 memory.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSamsung Mobile DevicesSelected Q(10.0), R(11.0) < SMR Mar-2021 Release 1affected

Weaknesses

  • CWE-20: CWE-20 Improper Input Validation

ADP Enrichment

CVE Program Container

Additional References

References