login
quiescence.eu
Saltar al contenido

CVE-2021-25489

Samsung Mobile Devices Improper Input Validation Vulnerability

n/a
CVSS
0.5%
EPSS (exploit prob.)
39.8%
EPSS percentile
Yes
Actively exploited
No
Ransomware use
2023-06-29
Added

Summary

Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.

Affected software

Vendor: Samsung  ·  Product: Mobile Devices

Weakness types (CWE):

CWE-20

What to do

This vulnerability appears in CISA's Known Exploited Vulnerabilities catalog, meaning it is being exploited in the wild. Prioritize patching affected systems and verify exposure across your estate.

Related vulnerabilities in Samsung

CVENameEPSSExploited
CVE-2024-7399 Samsung MagicINFO 9 Server Path Traversal Vulnerability 91.9% Yes
CVE-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability 33.1% Yes
CVE-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability 24.0% Yes
CVE-2021-25337 Samsung Mobile Devices Improper Access Control Vulnerability 2.8% Yes
CVE-2023-21492 Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerab 2.6% Yes
CVE-2025-21043 Samsung Mobile Devices Out-of-Bounds Write Vulnerability 1.9% Yes
CVE-2021-25369 Samsung Mobile Devices Improper Access Control Vulnerability 1.1% Yes
CVE-2021-25370 Samsung Mobile Devices Memory Corruption Vulnerability 0.9% Yes

Is your domain exposed?

Run a free, instant security report for any domain — exposure score, email auth, TLS and breach metadata.

Get your free report

All information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.