VDB

CVE-2021-25500

CVE-2021-25500 PUBLISHED CVSS 7.199999809265137 HIGH

A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise.

EPSS 0.10% · 1.1th percentile

Risk Scores

CVSS 3.1
7.199999809265137
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
EPSS Score
0.10%
1.1th percentile

Affected Products

VendorProductVersions
googleandroid10.0, 11.0
Samsung MobileSamsung Mobile DevicesSelect Q(10.0), R(11.0) devices with Exynos 980, 9820, 9830, 2100 chipset

Timeline

  • Nov 5, 2021 EPSS Score
  • Nov 5, 2021 CVE Published
  • Dec 31, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Apr 21, 2022 EPSS Score
  • Jun 16, 2022 EPSS Score
  • Aug 12, 2022 EPSS Score
  • Oct 7, 2022 EPSS Score
  • Dec 2, 2022 EPSS Score
  • Jan 26, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›