{"id":"CVE-2021-25372","kind":"vulnerability","aliases":["CVE-2021-25372"],"related":[],"title":"samsung android: An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access","description":"Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.\n\nCISA required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable","summary":"Samsung mobile devices have an improper boundary check in the DSP driver that allows out-of-bounds memory access. CISA lists it as actively exploited, and the sources do not say what an attacker gets beyond the memory access.","severity":"high","cvss":7.2,"epss":null,"exploited":true,"exploited_at":"2023-06-29T00:00:00+00:00","products":[{"name":"Samsung Mobile Devices","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"samsung android","fixed":[],"affected":"= 10.0","ecosystem":"vendor"},{"name":"samsung android","fixed":[],"affected":"= 11.0","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["android","exploited","infrastructure","mobile-devices","samsung"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply updates per vendor instructions, or discontinue use of the product if updates are unavailable.","status":"open","published_at":"2021-03-26T19:15:12+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:06:25+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-23T21:06:25Z","model":"claude-haiku-5-5","output":{"fix":"Apply updates per vendor instructions, or discontinue use of the product if updates are unavailable.","reach":"unknown","impact":"high","summary":"Samsung mobile devices have an improper boundary check in the DSP driver that allows out-of-bounds memory access. CISA lists it as actively exploited, and the sources do not say what an attacker gets beyond the memory access.","category":"infrastructure","who_cares":["samsung","android","mobile-devices"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Out-of-bounds memory access in DSP driver; actively exploited, impact unspecified","analyst_note":"Find the Samsung security bulletin for the patched build and the affected device/chipset list; check the CISA KEV entry for exploitation details.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000453,"input_tokens":2808,"output_tokens":345,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2021':14A,24A,27A '-25372':25A,28A '1':16A 'access':22A,62B,82B,103C 'action':106C 'activ':67B 'allow':17A,56B,96C 'android':2A,33A,35A,36B 'appli':107C 'attack':77B 'beyond':79B 'bound':20A,60B,101C 'boundari':5A,49B,89C 'check':6A,50B,90C 'cisa':63B,104C 'contain':86C 'cve':23A,26A 'devic':41B,45B,85C 'devices':31A 'discontinu':113C 'driver':9A,54B,94C 'dsp':8A,53B,93C 'exploit':37B,68B 'get':78B 'improp':4A,48B,88C 'infrastructur':38B 'instruct':111C 'list':64B 'mar':13A 'memori':21A,61B,81B,102C 'mobil':40B,44B,84C 'mobile':30A 'mobile-devic':39B 'out-of-bound':57B,98C 'per':109C 'prior':10A 'product':117C 'releas':15A 'requir':105C 'samsung':1A,29A,32A,34A,42B,43B,83C 'say':74B 'smr':12A 'sourc':71B 'unavail':121C 'updat':108C,119C 'use':114C 'vendor':110C 'vulner':91C 'within':92C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2021-03-26T19:15:12+00:00","kev":{"dateAdded":"2023-06-29","dueDate":"2023-07-20","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","cvss_by":"mobile.security@samsung.com","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2021-25372","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25372","severity":null,"published_at":"2023-06-29T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T12:39:23+00:00","note":null},{"source":"nvd","external_id":"CVE-2021-25372","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25372","severity":null,"published_at":"2021-03-26T19:15:12+00:00","modified_at":"2026-06-17T03:41:57+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}