Skip to content
OpenAdvisories
Low · 3.3 Known exploited CVE-2021-25489 EUVD-2021-12385GHSA-hmpv-pvg5-4fpq

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format s…

Published Oct 6, 2021 · Updated Oct 21, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices O(8.1), P(9.0), Q(10.0), R(11.0) – < SMR Oct-2021 Release 1 SMR Oct-2021 Release 1

References