{"id":"CVE-2021-25487","kind":"vulnerability","aliases":["CVE-2021-25487"],"related":[],"title":"samsung android: Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1…","description":"Samsung mobile devices contain an out-of-bounds read vulnerability within the modem interface driver due to a lack of boundary checking of a buffer in set_skb_priv(), leading to remote code execution by dereference of an invalid function pointer.\n\nCISA required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable","summary":"Samsung mobile devices have an out-of-bounds read in the modem interface driver, caused by missing boundary checks on a buffer in set_skb_priv(). The sources say an attacker can get remote code execution by triggering a dereference of an invalid function pointer.","severity":"critical","cvss":7.8,"epss":null,"exploited":true,"exploited_at":"2023-06-29T00:00:00+00:00","products":[{"name":"Samsung Mobile Devices","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"samsung android","fixed":[],"affected":"= 8.1","ecosystem":"vendor"},{"name":"samsung android","fixed":[],"affected":"= 9.0","ecosystem":"vendor"},{"name":"samsung android","fixed":[],"affected":"= 10.0","ecosystem":"vendor"},{"name":"samsung android","fixed":[],"affected":"= 11.0","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["android","exploited","mobile-devices","samsung","vendor"],"not_affected_if":["non-samsung-devices"],"how_to_check":"Check the Android security patch level on each device (Settings > About phone > Software information); the sources do not name the patched level.","fix":"Apply the Samsung security update that covers this flaw, per vendor instructions; if no update is available, stop using the affected device.","status":"open","published_at":"2021-10-06T18:15:09+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:06:27+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T21:06:27Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Samsung security update that covers this flaw, per vendor instructions; if no update is available, stop using the affected device.","reach":"unknown","impact":"high","summary":"Samsung mobile devices have an out-of-bounds read in the modem interface driver, caused by missing boundary checks on a buffer in set_skb_priv(). The sources say an attacker can get remote code execution by triggering a dereference of an invalid function pointer.","category":"vendor","who_cares":["samsung","android","mobile-devices"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker runs code remotely on the phone through the modem driver.","analyst_note":"Find the Samsung bulletin listing affected models and patched patch levels, and whether CISA's KEV entry gives a due date; the sources here name no models or versions.","how_to_check":"Check the Android security patch level on each device (Settings > About phone > Software information); the sources do not name the patched level.","needs_analyst":true,"not_affected_if":["non-samsung-devices"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000485,"input_tokens":2847,"output_tokens":401,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2021':22A,26A,29A '-25487':27A,30A '1':24A 'action':139C 'android':2A,35A,37A,39A,41A,42B 'appli':140C 'attack':80B 'bound':57B,103C 'boundari':5A,67B,116C 'buffer':9A,71B,120C 'caus':64B 'check':6A,68B,117C 'cisa':137C 'code':84B,128C 'contain':98C 'cve':25A,28A 'derefer':89B,131C 'devic':46B,51B,97C 'devices':33A 'discontinu':146C 'driver':17A,63B,110C 'due':111C 'execut':85B,129C 'exploit':43B 'function':93B,135C 'get':82B 'instruct':144C 'interfac':16A,62B,109C 'invalid':92B,134C 'lack':3A,114C 'lead':125C 'miss':66B 'mobil':45B,50B,96C 'mobile':32A 'mobile-devic':44B 'modem':15A,61B,108C 'oct':21A 'out-of-bound':54B,100C 'per':142C 'pointer':94B,136C 'prior':18A 'priv':13A,75B,124C 'product':150C 'read':58B,104C 'releas':23A 'remot':83B,127C 'requir':138C 'samsung':1A,31A,34A,36A,38A,40A,47B,49B,95C 'say':78B 'set':11A,73B,122C 'skb':12A,74B,123C 'smr':20A 'sourc':77B 'trigger':87B 'unavail':154C 'updat':141C,152C 'use':147C 'vendor':48B,143C 'vulner':105C 'within':106C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2021-10-06T18:15:09+00:00","kev":{"dateAdded":"2023-06-29","dueDate":"2023-07-20","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","cvss_by":"mobile.security@samsung.com","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2021-25487","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25487","severity":null,"published_at":"2023-06-29T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T10:39:05+00:00","note":null},{"source":"nvd","external_id":"CVE-2021-25487","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25487","severity":null,"published_at":"2021-10-06T18:15:09+00:00","modified_at":"2026-06-17T03:42:10+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}