CVE-2021-25454

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

OOB read vulnerability in libsaacextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute remote DoS via forged aac file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Sep 9, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-254553.3OOB read vulnerability in libsaviextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to access arbitrary address through pCVE-2021-254565.5OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary addresCVE-2021-254573.3An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memoCVE-2021-254585.5NULL pointer dereference vulnerability in ION driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption.CVE-2021-254595.5An improper access control vulnerability in sspInit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to start BlockCVE-2021-254605.5An improper access control vulnerability in sspExit() in BlockchainTZService prior to SMR Sep-2021 Release 1 allows attackers to terminate BCVE-2021-254617.8An improper length check in APAService prior to SMR Sep-2021 Release 1 results in stack based Buffer Overflow.CVE-2021-254625.5NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption.CVE-2021-254633.3Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview.CVE-2021-254645.5An improper file management vulnerability in SamsungCapture prior to version 4.8.02 allows sensitive information leak.CVE-2021-254657.0An improper scheme check vulnerability in Samsung Themes prior to version 5.2.01 allows attackers to perform Man-in-the-middle attack.CVE-2021-254665.9Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and
CVE-2021-25454: Medium severity, CVSS 5.5 | Vulnix