CVE-2021-25489
Samsung Mobile Devices
Samsung Mobile Devices Improper Input Validation Vulnerability
What it is
Samsung mobile devices contain an improper input validation vulnerability within the modem interface driver that results in a format string bug leading to kernel panic.
What to do
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
Vendor notices and references
- security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
- nvd.nist.gov/vuln/detail/CVE-2021-25489
Description and required action as published by CISA. Full record at NVD.
Other Samsung entries on the list
- MagicINFO 9 Server Samsung MagicINFO 9 Server Path Traversal Vulnerability CVE-2024-7399 · Apr 24, 2026
- Mobile Devices Samsung Mobile Devices Out-of-Bounds Write Vulnerability CVE-2025-21042 · Nov 10, 2025
- Mobile Devices Samsung Mobile Devices Out-of-Bounds Write Vulnerability CVE-2025-21043 · Oct 2, 2025
- MagicINFO 9 Server Samsung MagicINFO 9 Server Path Traversal Vulnerability CVE-2025-4632 · May 22, 2025
- Mobile Devices Samsung Mobile Devices Use-After-Free Vulnerability CVE-2022-22265 · Sep 18, 2023
- Mobile Devices Samsung Mobile Devices Out-of-Bounds Read Vulnerability CVE-2021-25487 · Jun 29, 2023