Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Jul 20, 2023

CVE-2021-25371

High
EPSS 0.9%CISA KEV
Samsung/Mobile Devices

Description

Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.

EPSS — Exploit Probability

0.9%

Higher than 75.4% of all CVEs

Required Action

https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=3; https://nvd.nist.gov/vuln/detail/CVE-2021-25371

Risk Assessment

ELEVATED
In CISA KEV

Details

Severity
High
EPSS
0.9%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Jun 29, 2023

Added to KEV

Jun 29, 2023

Remediation Due

Jul 20, 2023

Affected Product

Samsung

Mobile Devices

View all Samsung CVEs