Skip to content
OpenAdvisories
Unscored CVE-2021-25416 EUVD-2021-12312GHSA-5vw5-q63v-r2rf

Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to create executa…

Published Jun 11, 2021 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to create executable kernel page outside code area.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Q(10.0), R(11.0) devices with Exynos9610, 9810, 9820, 9830 – < SMA JUN-2021 Release 1 SMA JUN-2021 Release 1

References