PT-2021-16532
CVE-2021-25339
·
Published
2021-03-04
·
Updated
2021-03-11
Description by
CVSS 3.1
5.2
MediumMetricsAV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Name of the Vulnerable Software and Affected Versions:
Samsung mobile devices versions prior to SMR Mar-2021 Release 1
Description:
The issue is related to improper address validation in HArx, which allows an attacker, given a compromised kernel, to corrupt EL2 memory.
Recommendations:
For Samsung mobile devices versions prior to SMR Mar-2021 Release 1, update to SMR Mar-2021 Release 1 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾