CVE-2021-25395

Samsung Mobile Devices

Published 11 Jun 2021 · updated 17 Jun 2026 · Analyzed

6.4 Medium · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 29 Jun 2023, with a remediation deadline of 20 Jul 2023 for US federal agencies.

Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

Description

A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.

References