CyberSec.Space Logo
Back to CVE Browser

CVE-2021-25487

🔥 Known Exploited (CISA KEV)HIGH
7.3
CVSS Severity Score
EPSS Score49.1600%
EPSS Percentile97.27th
Published2021-10-06
Last Modified2025-10-30
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.

Affected Platforms (CPE)

💻
Samsung

Android

= 8.1= 9.0= 10.0= 11.0

References & Advisories

🔗 https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
🔗 https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25487

Related Vulnerabilities

CVE-2026-84977.4

Improper certificate validation in the Devolutions Server connection handling in Devolutions Password Manager 2026.2.1.0 and earli...

CVE-2026-628285.4

Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.

CVE-2026-164047.4

Spoofing issue in Firefox for Android. This vulnerability was fixed in Firefox 153.

CVE-2026-163976.5

Clickjacking issue in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 153.