CVE-2021-25489

Known Exploited (CISA KEV)LOW

3.3

CVSS Severity Score

EPSS Score28.2580%

EPSS Percentile96.42th

PublishedOct 6, 2021

Last ModifiedOct 30, 2025

Vulnerability Description

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.

Affected Platforms (CPE)

💻

Samsung

Android

= 8.1

💻

Samsung

Android

= 9.0

💻

Samsung

Android

= 9.0

💻

Samsung

Android

= 9.0

💻

Samsung

Android

= 9.0

💻

Samsung

Android

= 9.0

💻

Samsung

Android

= 9.0

💻

Samsung

Android

= 9.0

💻

Samsung

Android

= 9.0

💻

Samsung

Android

= 9.0

💻

Samsung

Android

= 10.0

💻

Samsung

Android

= 10.0

💻

Samsung

Android

= 10.0

💻

Samsung

Android

= 10.0

💻

Samsung

Android

= 10.0

💻

Samsung

Android

= 10.0

💻

Samsung

Android

= 10.0

💻

Samsung

Android

= 10.0

💻

Samsung

Android

= 10.0

💻

Samsung

Android

= 11.0

💻

Samsung

Android

= 11.0

💻

Samsung

Android

= 11.0

💻

Samsung

Android

= 11.0

💻

Samsung

Android

= 11.0

💻

Samsung

Android

= 11.0

💻

Samsung

Android

= 11.0

💻

Samsung

Android

= 11.0

💻

Samsung

Android

= 11.0

References & Advisories

🔗 https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25489

Vulnerability Description

Affected Platforms (CPE)

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

Android

References & Advisories

Related Vulnerabilities