CVE-2021-25478

A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos:-:*:*:*:*:*:*:*

History

13 Oct 2021, 18:08

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : 6.5
v3 : 7.2
CPE cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*
cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*
cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*
cpe:2.3:h:samsung:exynos:-:*:*:*:*:*:*:*
CWE CWE-787
References (MISC) https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10 - (MISC) https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10 - Vendor Advisory

06 Oct 2021, 18:39

Type Values Removed Values Added
New CVE

Information

Published : 2021-10-06 18:15

Updated : 2024-02-04 22:08


NVD link : CVE-2021-25478

Mitre link : CVE-2021-25478

CVE.ORG link : CVE-2021-25478


JSON object : View

Products Affected

google

  • android

samsung

  • exynos
CWE
CWE-787

Out-of-bounds Write

CWE-121

Stack-based Buffer Overflow