Live › vulnerability › CVE-2021-25369
Go to dashboardSamsung mobile devices using the Mali GPU driver expose kernel information to userspace through an improper access control flaw in the sec_log file. An attacker with a local foothold gets sensitive kernel data, and the flaw was chained with CVE-2021-25337 and CVE-2021-25370 in exploits.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Samsung Mobile Devices | vendor | – | – |
| samsung android | vendor | = 8.0 | – |
| samsung android | vendor | = 8.1 | – |
| samsung android | vendor | = 9.0 | – |
| samsung android | vendor | = 10.0 | – |
Unknown from the sources.
Apply the Samsung security update for your device per vendor instructions, as CISA requires.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Samsung mobile devices using Mali GPU contains an improper access control vulnerability in sec_log file. Exploitation of the vulnerability exposes sensitive kernel information to the userspace. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25370.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2021-25369")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.