VDB

CVE-2021-25416

CVE-2021-25416 PUBLISHED CVSS 2.0999999046325684 LOW

Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to create executable kernel page outside code area.

EPSS 0.12% · 2.1th percentile

Risk Scores

CVSS 2.0
2.0999999046325684
EPSS Score
0.12%
2.1th percentile

Affected Products

VendorProductVersions
googleandroid10.0, 11.0
Samsung MobileSamsung Mobile DevicesQ(10.0), R(11.0) devices with Exynos9610, 9810, 9820, 9830

Timeline

  • Jun 11, 2021 CVE Published
  • Jun 12, 2021 EPSS Score
  • Aug 13, 2021 EPSS Score
  • Oct 13, 2021 EPSS Score
  • Dec 12, 2021 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Apr 13, 2022 EPSS Score
  • Jun 13, 2022 EPSS Score
  • Aug 14, 2022 EPSS Score
  • Oct 13, 2022 EPSS Score
  • Dec 13, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›