CVE-2021-25434

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1450%

EPSS Percentile29.17th

Published2021年7月8日

Last Modified2024年11月21日

Vulnerability Description

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using param partition in wireless firmware download mode.

Affected Platforms (CPE)

💻

Linux

Tizen

< 5.5

References & Advisories

🔗 https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7

関連する脆弱性情報

CVE-2019-35689.8

A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets ...

CVE-2021-254359.8

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execut...

CVE-2018-162729.8

The wpa_supplicant system service in Samsung Galaxy Gear series allows an unprivileged process to fully control the Wi-Fi interfac...

CVE-2021-254369.8

Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code exec...