Skip to content
OpenAdvisories
High · 7.3 Known exploited CVE-2021-25487 EUVD-2021-12383GHSA-4fpw-j345-q48r

Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it re…

Published Oct 6, 2021 · Updated Oct 21, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices O(8.1), P(9.0), Q(10.0), R(11.0) – < SMR Oct-2021 Release 1 SMR Oct-2021 Release 1

References