Actively exploited in the wild
Samsung Mobile Devices Improper Access Control Vulnerability
Samsung - Mobile Devices · Listed in the CISA KEV since 2022-11-08. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-25369
MediumCVSS 6.2KEVSummary
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.
Risk Assessment
An attacker could gain access to sensitive kernel information, potentially leading to further attacks or data disclosure.
Recommendation
Update the device to SMR MAR-2021 Release 1 or later to fix the vulnerability.
Other vulnerabilities in Samsung mobile devices
Original NVD description (English source)
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.