CVE-2021-25469

Summary

A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSamsung Mobile DevicesSelect Q(10.0), R(11.0) devices with Exynos chipsets < SMR Oct-2021 Release 1affected

Weaknesses

  • CWE-120: CWE-120: Buffer Copy without Checking Size of Input

ADP Enrichment

CVE Program Container

Additional References

References