CVE-2021-25518

Summary

An improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSamsung Mobile DevicesP(9.0), Q(10.0), R(11.0) devices with selected Exynos chipsets < SMR Dec-2021 Release 1affected

Weaknesses

  • CWE-119: CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

ADP Enrichment

CVE Program Container

Additional References

References