Samsung · Mobile Devices
CVE-2021-25372
Samsung Mobile Devices Improper Boundary Check Vulnerability
Exploited in attacks
Medium 6.1 Attack chance: 0.8%
What it is
An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.
CISA: Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.
What to do
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
Deadline for US federal agencies: July 20, 2023
More exploited flaws from Samsung
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Nov 10, 2025 | Out-of-Bounds Write | Mobile Devices | High 8.8 | 36% |
| Oct 2, 2025 | Out-of-Bounds Write | Mobile Devices | High 8.8 | 2.2% |
| Sep 18, 2023 | Use-After-Free | Mobile Devices | Medium 5.0 | 0.4% |
| Jun 29, 2023 | Unspecified | Mobile Devices | Medium 6.1 | 0.8% |
| Jun 29, 2023 | Race Condition | Mobile Devices | Medium 6.4 | 0.4% |
| Jun 29, 2023 | Race Condition | Mobile Devices | Medium 6.4 | 0.4% |
| Jun 29, 2023 | Out-of-Bounds Read | Mobile Devices | High 7.3 | 0.6% |
| Jun 29, 2023 | Improper Input Validation | Mobile Devices | Low 3.3 | 0.5% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.