Lucene search

Samsung MobileCVE-2021-25452

HistorySep 09, 2021 - 7:15 p.m.

CVE-2021-25452

2021-09-0919:15:09

CWE-20

CWE-22

Samsung Mobile

web.nvd.nist.gov

cve-2021-25452

input validation

dsp driver

denial of service

nvd

security vulnerability

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

9.9%

JSON

An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of service on the device.

Affected configurations

Nvd

Node

samsungexynos_2100Match-

samsungexynos_980Match-

samsungexynos_9830Match-

AND

googleandroidMatch10.0

googleandroidMatch11.0

VendorProductVersionCPE
samsungexynos_2100-cpe:2.3:h:samsung:exynos_2100:-:*:*:*:*:*:*:*
samsungexynos_980-cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*
samsungexynos_9830-cpe:2.3:h:samsung:exynos_9830:-:*:*:*:*:*:*:*
googleandroid10.0cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*
googleandroid11.0cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samsung	exynos_2100	-	cpe:2.3:h:samsung:exynos_2100:-:::::::*
samsung	exynos_980	-	cpe:2.3:h:samsung:exynos_980:-:::::::*
samsung	exynos_9830	-	cpe:2.3:h:samsung:exynos_9830:-:::::::*
google	android	10.0	cpe:2.3:o:google:android:10.0:::::::*
google	android	11.0	cpe:2.3:o:google:android:11.0:::::::*

CNA Affected

[
  {
    "product": "Samsung Mobile Devices ",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "SMR Sep-2021 Release 1",
        "status": "affected",
        "version": "Q(10.0), R(11.0) devices with Exynos 980, 9830, 2100 chipset",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/securityUpdate.smsb?year=2021&month=9

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

9.9%

JSON

Related for CVE-2021-25452