{"schema":"threatline.record/2","record":{"id":"CVE-2021-25370","aliases":[],"summary":"Samsung Mobile Devices Memory Corruption Vulnerability","details":"Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.","categories":["Unclassified"],"product":"Mobile Devices","vendor":"Samsung","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2021-25370","source_modified_at":"2026-01-14T14:24:49.025Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Samsung Mobile Devices","vendor":"Samsung Mobile","versions":[{"lessThan":"SMR Mar-2021 Release 1","status":"affected","version":"Selected O(8.X), P(9.0), Q(10.0), R(11.0) ","versionType":"custom"}],"defaultStatus":null}],"fixed_versions":[],"cvss":6.1,"severity":"Medium","kev":{"listed":true,"date_added":"2022-11-08","due_date":"2022-11-29","required_action":"Apply updates per vendor instructions.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.0089,"percentile":0.58998,"score_date":"2026-10-23"},"published_at":"2021-03-26T18:23:25.000Z","modified_at":"2026-01-14T14:24:49.025Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2021-25370","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-01-14T14:24:49.025Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2021-25370","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://security.samsungmobile.com/securityUpdate.smsb","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25370","source":"CISA KEV"},{"source":"CVE List","url":"https://security.samsungmobile.com","tags":["x_refsource_MISC","x_transferred"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25370","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"total","assessed_at":"2025-02-04T21:25:47.186998Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-01-14T14:24:49.025Z","content_hash":"85ec0e524e96ac9088033ceb0174e746a397b04eaa6d097fe3100bbe86dde9f2"}}