CVE-2021-25490

Summary

A keyblob downgrade attack in keymaster prior to SMR Oct-2021 Release 1 allows attacker to trigger IV reuse vulnerability with privileged process.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSamsung Mobile DevicesP(9.0), Q(10.0), R(11.0) < SMR Oct-2021 Release 1affected

Weaknesses

  • CWE-287: CWE-287: Improper Authentication

ADP Enrichment

CVE Program Container

Additional References

References