Live › vulnerability › CVE-2021-25487
Go to dashboardSamsung mobile devices have an out-of-bounds read in the modem interface driver, caused by missing boundary checks on a buffer in set_skb_priv(). The sources say an attacker can get remote code execution by triggering a dereference of an invalid function pointer.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Samsung Mobile Devices | vendor | – | – |
| samsung android | vendor | = 8.1 | – |
| samsung android | vendor | = 9.0 | – |
| samsung android | vendor | = 10.0 | – |
| samsung android | vendor | = 11.0 | – |
Check the Android security patch level on each device (Settings > About phone > Software information); the sources do not name the patched level.
Apply the Samsung security update that covers this flaw, per vendor instructions; if no update is available, stop using the affected device.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.
CISA required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
This page as .md · .json · in your agent: get_signal("CVE-2021-25487")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.