Findings

CVE-2021-25372

Samsung Mobile Devices Improper Boundary Check Vulnerability

Published Mar 26, 2021 · updated Jun 16, 2026 · samsung android

Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 26, 2021 · Catalog

    Detected

    Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.

  2. Jun 29, 2023 · CISA KEV

    Known exploited

    Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

  3. Jul 20, 2023 · CISA KEV

    Remediation due

    Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

  4. Jun 16, 2026 · Catalog

    Updated

    Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

CISA due date Jul 20, 2023

Affected

  • cpe samsung/android10.0
  • cpe samsung/android11.0
  • vendor Samsung Mobile Devicesversion unspecified

Sources

  • CISA KEVCVE-2021-25372

    Samsung mobile devices contain an improper boundary check vulnerability within DSP driver that allows for out-of-bounds memory access.

    cisa.gov
  • CVE.orgCVE-2021-25372

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2021-25372

    30-day exploitation probability 0.8%

    first.org
  • NIST NVDCVE-2021-25372

    An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.

    nvd.nist.gov

References