Actively exploited in the wild
Samsung Mobile Devices Improper Boundary Check Vulnerability
Samsung - Mobile Devices · Listed in the CISA KEV since 2023-06-29. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
CVE-2021-25372
MediumCVSS 6.1KEVSummary
An improper boundary check in the DSP driver prior to SMR Mar-2021 Release 1 allows out-of-bounds memory access.
Risk Assessment
It may lead to memory corruption, data leakage, or code execution in the kernel/system context, compromising device confidentiality and integrity.
Recommendation
Update the software to a version that includes SMR Mar-2021 Release 1 or later to fix the improper boundary check in the DSP driver.
Other vulnerabilities in DSP driver
Original NVD description (English source)
An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.