CVE-2021-25436

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1600%

EPSS Percentile14.87th

PublishedJul 8, 2021

Last ModifiedNov 21, 2024

Vulnerability Description

Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code execution via Samsung Accessory Protocol.

Affected Platforms (CPE)

💻

Linux

Tizen

< 5.5

References & Advisories

🔗 https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7

Related Vulnerabilities

CVE-2019-35689.8

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets ...

CVE-2021-254349.8

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execut...

CVE-2018-162729.8

The wpa_supplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-Fi interfac...

CVE-2021-254359.8

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execut...