CVE-2021-25462

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
Samsung MobileSamsung Mobile Devices>= P(9.0), Q(10.0) , R(11.0) devices with Exynos chipsets, < SMR Sep-2021 Release 1

References

Timeline

Published
Sep 9, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-254633.3Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview.CVE-2021-254645.5An improper file management vulnerability in SamsungCapture prior to version 4.8.02 allows sensitive information leak.CVE-2021-254657.0An improper scheme check vulnerability in Samsung Themes prior to version 5.2.01 allows attackers to perform Man-in-the-middle attack.CVE-2021-254665.9Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and CVE-2021-254676.7Assuming system privilege is gained, possible buffer overflow vulnerabilities in the Vision DSP kernel driver prior to SMR Oct-2021 Release CVE-2021-254684.4A possible guessing and confirming a byte memory vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows attackers to readCVE-2021-254696.7A possible stack-based buffer overflow vulnerability in Widevine trustlet prior to SMR Oct-2021 Release 1 allows arbitrary code execution.CVE-2021-254707.9An improper caller check logic of SMC call in TEEGRIS secure OS prior to SMR Oct-2021 Release 1 can be used to compromise TEE.CVE-2021-254717.5A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile CVE-2021-254723.3An improper access control vulnerability in BluetoothSettingsProvider prior to SMR Oct-2021 Release 1 allows untrusted application to overwrCVE-2021-254734.4Assuming a shell privilege is gained, an improper exception handling for multi_sim_bar_hide_by_meadia_full value in SystemUI prior to SMR OcCVE-2021-254744.4Assuming a shell privilege is gained, an improper exception handling for multi_sim_bar_show_on_qspanel value in SystemUI prior to SMR Oct-20
CVE-2021-25462: Medium severity, CVSS 5.5 | Vulnix