Skip to content
COOEY

EXPOSURES › CVE-2021-25394

CVE-2021-25394

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2023-06-29 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-25394 ↗
⌖ EXPLOITED IN THE WILD SHAME 50/100 exploited-in-wild

Samsung mobile devices have a race condition vulnerability allowing unauthorized writes with radio privilege compromise, and it's actively being exploited in the wild.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Samsung · vendorMobile Devices · product
DESCRIPTION

Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.