Samsung · Mobile Devices
CVE-2021-25394
Samsung Mobile Devices Race Condition Vulnerability
What it is
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.
CISA: Samsung mobile devices contain a race condition vulnerability within the MFC charger driver that leads to a use-after-free allowing for a write given a radio privilege is compromised.
What to do
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
Deadline for US federal agencies: July 20, 2023
- Added to the CISA list
- June 29, 2023
- Published
- June 11, 2021
- Severity
- Medium 6.4 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 0.4% in the top 65.8% of all known vulnerabilities
- Weakness
- CWE-416
- More details
- NVD · CVE.org · CISA
All references (1)
More exploited flaws from Samsung
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Nov 10, 2025 | Out-of-Bounds Write | Mobile Devices | High 8.8 | 36% |
| Oct 2, 2025 | Out-of-Bounds Write | Mobile Devices | High 8.8 | 2.2% |
| Sep 18, 2023 | Use-After-Free | Mobile Devices | Medium 5.0 | 0.4% |
| Jun 29, 2023 | Unspecified | Mobile Devices | Medium 6.1 | 0.8% |
| Jun 29, 2023 | Improper Boundary Check | Mobile Devices | Medium 6.1 | 0.8% |
| Jun 29, 2023 | Race Condition | Mobile Devices | Medium 6.4 | 0.4% |
| Jun 29, 2023 | Out-of-Bounds Read | Mobile Devices | High 7.3 | 0.6% |
| Jun 29, 2023 | Improper Input Validation | Mobile Devices | Low 3.3 | 0.5% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.