← KEV catalog
CISA known exploited vulnerability

CVE-2021-25489

Samsung Mobile Devices Improper Input Validation Vulnerability

SOURCE FACT

Samsung · Mobile Devices

Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

CISA notes

https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://nvd.nist.gov/vuln/detail/CVE-2021-25489

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?