PT-2021-16671
CVE-2021-25481
·
Published
2021-10-06
·
Updated
2021-10-13
Description by
CVSS 3.1
6.7
MediumMetricsAV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Exynos CP booting driver versions prior to SMR Oct-2021 Release 1
Description:
The issue is related to improper error handling in the Exynos CP booting driver, which allows local attackers to bypass the Secure Memory Protector of Exynos CP Memory. This could potentially lead to unauthorized access to sensitive memory areas.
Recommendations:
For versions prior to SMR Oct-2021 Release 1, update to SMR Oct-2021 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Exynos CP booting driver to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾