Actively exploited in the wild
Samsung Mobile Devices Race Condition Vulnerability
Samsung - Mobile Devices · Listed in the CISA KEV since 2023-06-29. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions or discontinue use of the product if updates are unavailable
CVE-2021-25395
MediumCVSS 6.4KEVSummary
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.
Risk Assessment
A local attacker with compromised radio privileges can bypass signature verification, potentially leading to unauthorized code execution or system modification.
Recommendation
Apply SMR MAY-2021 Release 1 or later to fix the vulnerability.
Other vulnerabilities in MFC charger driver
Original NVD description (English source)
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.