Samsung · Mobile Devices
CVE-2021-25371
Samsung Mobile Devices Unspecified Vulnerability
Exploited in attacks
Medium 6.1 Attack chance: 0.8%
What it is
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.
CISA: Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.
What to do
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
Deadline for US federal agencies: July 20, 2023
More exploited flaws from Samsung
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Nov 10, 2025 | Out-of-Bounds Write | Mobile Devices | High 8.8 | 36% |
| Oct 2, 2025 | Out-of-Bounds Write | Mobile Devices | High 8.8 | 2.2% |
| Sep 18, 2023 | Use-After-Free | Mobile Devices | Medium 5.0 | 0.4% |
| Jun 29, 2023 | Improper Boundary Check | Mobile Devices | Medium 6.1 | 0.8% |
| Jun 29, 2023 | Race Condition | Mobile Devices | Medium 6.4 | 0.4% |
| Jun 29, 2023 | Race Condition | Mobile Devices | Medium 6.4 | 0.4% |
| Jun 29, 2023 | Out-of-Bounds Read | Mobile Devices | High 7.3 | 0.6% |
| Jun 29, 2023 | Improper Input Validation | Mobile Devices | Low 3.3 | 0.5% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.