{"schemaVersion":3,"id":"CVE-2021-25371","aliases":[],"status":"published","duplicateOf":null,"title":"Samsung Mobile Devices Unspecified Vulnerability","description":"A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.","dates":{"published":"2021-03-26T18:24:15.000Z","modified":"2025-10-21T23:25:51.106Z","reserved":null,"kevAdded":["2023-06-29T00:00:00.000Z"],"kevDue":["2023-07-20T00:00:00.000Z"]},"cvss":{"headline":{"score":7.2,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.7,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.2,"severity":"high","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00802,"percentile":0.55882,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00802},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00802,"percentile":0.55882}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00802,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00802,"percentile":0.55882}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2023-06-29T00:00:00.000Z","dueDate":"2023-07-20T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable","name":"Samsung Mobile Devices Unspecified Vulnerability","description":"Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.","notes":[{"type":"url","href":"https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=3","label":"security.samsungmobile.com/securityUpdate.smsb?year=2021&month=3"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2021-25371","label":"nvd.nist.gov/vuln/detail/CVE-2021-25371"}],"vendor":"Samsung","product":"Mobile Devices","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2023-06-29T00:00:00.000Z","dueDate":"2023-07-20T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable","name":"Samsung Mobile Devices Unspecified Vulnerability","description":"Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.","notes":[{"type":"url","href":"https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=3","label":"security.samsungmobile.com/securityUpdate.smsb?year=2021&month=3"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2021-25371","label":"nvd.nist.gov/vuln/detail/CVE-2021-25371"}],"vendor":"Samsung","product":"Mobile Devices","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-912","name":"Hidden Functionality","description":"The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/912.html"}],"affected":[{"vendor":"samsung mobile","product":"samsung mobile devices","name":"Samsung Mobile Devices","label":"samsung mobile devices","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830, < SMR Mar-2021 Release 1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ Q(10.0), R(11.0) devices with exynos980, exynos2100, exynos9830, < SMR Mar-2021 Release 1","eol":null,"hubHref":"/vendor/samsung_mobile/samsung_mobile_devices"},{"vendor":"samsung","product":"android","name":"android","label":"android","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10.0:smr-feb-2021-r1","noFixRecorded":false,"fixedIn":null},{"text":"10.0:smr-jan-2021-r1","noFixRecorded":false,"fixedIn":null},{"text":"11.0:smr-feb-2021-r1","noFixRecorded":false,"fixedIn":null},{"text":"11.0:smr-jan-2021-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"10.0:smr-feb-2021-r1 | 10.0:smr-jan-2021-r1 | 11.0:smr-feb-2021-r1 | 11.0:smr-jan-2021-r1","eol":null,"hubHref":"/vendor/samsung/android"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://security.samsungmobile.com/securityUpdate.smsb","label":"security.samsungmobile.com/securityUpdate.smsb","hostname":"security.samsungmobile.com","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"https://security.samsungmobile.com","label":"security.samsungmobile.com","hostname":"security.samsungmobile.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25371","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25371","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2021-03-26T18:24:15.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2023-06-29T00:00:00.000Z","label":"Added to CISA KEV","detail":"Samsung Mobile Devices Unspecified Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2023-07-20T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:25:51.106Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T00:45:24.217Z","stale":false,"partial":false}}