CVE-2021-25487
Samsung Mobile Devices
Samsung Mobile Devices Out-of-Bounds Read Vulnerability
What it is
Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.
What to do
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
Vendor notices and references
- security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
- nvd.nist.gov/vuln/detail/CVE-2021-25487
Description and required action as published by CISA. Full record at NVD.
Other Samsung entries on the list
- MagicINFO 9 Server Samsung MagicINFO 9 Server Path Traversal Vulnerability CVE-2024-7399 · Apr 24, 2026
- Mobile Devices Samsung Mobile Devices Out-of-Bounds Write Vulnerability CVE-2025-21042 · Nov 10, 2025
- Mobile Devices Samsung Mobile Devices Out-of-Bounds Write Vulnerability CVE-2025-21043 · Oct 2, 2025
- MagicINFO 9 Server Samsung MagicINFO 9 Server Path Traversal Vulnerability CVE-2025-4632 · May 22, 2025
- Mobile Devices Samsung Mobile Devices Use-After-Free Vulnerability CVE-2022-22265 · Sep 18, 2023
- Mobile Devices Samsung Mobile Devices Improper Input Validation Vulnerability CVE-2021-25489 · Jun 29, 2023