CVE-2021-25435

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0680%

EPSS Percentile30.16th

PublishedJul 8, 2021

Last ModifiedNov 21, 2024

Vulnerability Description

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using recovery partition in wireless firmware download mode.

Affected Platforms (CPE)

💻

Linux

Tizen

< 5.5

References & Advisories

🔗 https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7

Related Vulnerabilities

CVE-2019-35689.8

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets ...

CVE-2021-254349.8

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execut...

CVE-2018-162729.8

The wpa_supplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-Fi interfac...

CVE-2021-254369.8

Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code exec...