Actively exploited in the wild
Samsung Mobile Devices Unspecified Vulnerability
Samsung - Mobile Devices · Listed in the CISA KEV since 2023-06-29. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
CVE-2021-25371
MediumCVSS 6.1KEVSummary
A vulnerability in the DSP driver prior to SMR Mar-2021 Release 1 allows attackers to load arbitrary ELF libraries inside the DSP.
Risk Assessment
An attacker can load malicious code into the DSP, potentially leading to unauthorized operations, privilege escalation, or device compromise.
Recommendation
Update the software to a version that includes SMR Mar-2021 Release 1 or later to prevent loading arbitrary ELF libraries in the DSP.
Other vulnerabilities in DSP driver
Original NVD description (English source)
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.