Actively exploited in the wild
Samsung Mobile Devices Race Condition Vulnerability
Samsung - Mobile Devices · Listed in the CISA KEV since 2023-06-29. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
CVE-2021-25394
MediumCVSS 6.4KEVSummary
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.
Risk Assessment
A local attacker with compromised radio privileges can perform arbitrary memory writes, potentially leading to code execution or system instability.
Recommendation
Apply SMR MAY-2021 Release 1 or later to fix the vulnerability.
Other vulnerabilities in MFC charger driver
Original NVD description (English source)
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.