KEV Entry

CVE-2021-25370

Known Exploited Vulnerability Entry CISA

Back to Catalog View Vulnerability
Entry Details
Confirmed Exploited

CVE-2021-25370

2022-11-08 01:00 CET

Timestamps

2022-11-08

2022-11-08

Scope

Samsung Mobile Devices Memory Corruption Vulnerability | Affected: Samsung / Mobile Devices | Description: Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369. | Required action: Apply updates per vendor instructions. | Due date: 2022-11-29 | Known ransomware campaign use (KEV): Unknown | Notes (KEV): https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25370

References
  • {'id': 'CVE-2021-25370', 'url': 'https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-25370'}

8da1c0c2-2f0e-4ba1-a0b8-8bae847c94d7

CISA
405284c2-e461-4670-8979-7fd2c9755a60

2026-10-02 08:09 CEST

2026-10-02 08:09 CEST

Evidence
1
Type Source Signal Confidence Details GCVE Metadata
vendor_report cisa-kev successful_exploitation 0.80
View details 
{
  "cwes": [
    "CWE-416"
  ],
  "date_added": "2022-11-08",
  "due_date": "2022-11-29",
  "feed": "CISA Known Exploited Vulnerabilities Catalog",
  "knownRansomwareCampaignUse": "Unknown",
  "product": "Mobile Devices",
  "vendorProject": "Samsung",
  "vulnerabilityName": "Samsung Mobile Devices Memory Corruption Vulnerability"
}
 -
Export Options
JSON Object JSON API View Full Catalog