---
id: "CVE-2021-25371"
kind: "vulnerability"
aliases: ["CVE-2021-25371"]
title: "samsung android: A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP"
severity: "high"
cvss: 7.2
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Samsung Mobile Devices", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "samsung android", "fixed": [], "affected": "= 10.0", "ecosystem": "vendor"}, {"name": "samsung android", "fixed": [], "affected": "= 11.0", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["android", "exploited", "infrastructure", "mobile-devices", "samsung"]
not_affected_if: ["fully-patched-devices", "non-samsung-devices"]
published_at: "2021-03-26T19:15:12+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25371", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-25371", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# samsung android: A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP

Samsung mobile devices have an unspecified flaw in the DSP driver that lets an attacker load ELF libraries into the DSP. CISA lists it as actively exploited, so the attacker gets code execution on the digital signal processor.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Samsung Mobile Devices affected ? fixed ?
- vendor:samsung android affected = 10.0 fixed ?
- vendor:samsung android affected = 11.0 fixed ?

## How to check

Check the device's security patch level in Settings > About phone > Software information; compare it with Samsung's bulletin for the version. unknown for a specific file or setting.

## Fix

Apply the Samsung security update for the device per vendor instructions; if no update exists, stop using the device (per CISA required action).

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25371
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2021-25371

## From the sources

Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.

CISA required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_