{"history":[{"alert":0,"cve":"CVE-2021-25370","id":22112,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.0089, \"percentile\": 0.59835}"},{"alert":0,"cve":"CVE-2021-25370","id":19731,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.0089, \"percentile\": 0.59668}"},{"alert":0,"cve":"CVE-2021-25370","id":17697,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.0089, \"percentile\": 0.59621}"},{"alert":0,"cve":"CVE-2021-25370","id":15761,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.0089, \"percentile\": 0.59605}"},{"alert":0,"cve":"CVE-2021-25370","id":13739,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.0089, \"percentile\": 0.59586}"},{"alert":0,"cve":"CVE-2021-25370","id":11521,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.0089, \"percentile\": 0.59527}"},{"alert":0,"cve":"CVE-2021-25370","id":9507,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.0089, \"percentile\": 0.595}"},{"alert":1,"cve":"CVE-2021-25370","id":9243,"kind":"cna","observed_at":1793917201,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-03T20:03:05.565Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://security.samsungmobile.com/securityUpdate.smsb\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://security.samsungmobile.com\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2021-25370\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-02-04T21:25:47.186998Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2022-11-08\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25370\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-703\", \"description\": \"CWE-703 Improper Check or Handling of Exceptional Conditions\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-01-14T14:24:49.025Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25370\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"Samsung Mobile Devices\", \"vendor\": \"Samsung Mobile\", \"versions\": [{\"lessThan\": \"SMR Mar-2021 Release 1\", \"status\": \"affected\", \"version\": \"Selected O(8.X), P(9.0), Q(10.0), R(11.0) \", \"versionType\": \"custom\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"HIGH\", \"attackVector\": \"PHYSICAL\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 6.1, \"baseSeverity\": \"MEDIUM\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"HIGH\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"CVE-703: Improper Check or Handling of Exceptional Conditions\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2021-03-26T18:23:25.000Z\", \"orgId\": \"3af57064-a867-422c-b2ad-40307b65c458\", \"shortName\": \"Samsung Mobile\"}, \"references\": [{\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://security.samsungmobile.com/securityUpdate.smsb\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://security.samsungmobile.com\"}], \"source\": {\"discovery\": \"UNKNOWN\"}, \"x_generator\": {\"engine\": \"Vulnogram 0.0.9\"}, \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"mobile.security@samsung.com\", \"ID\": \"CVE-2021-25370\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"Samsung Mobile Devices\", \"version\": {\"version_data\": [{\"version_affected\": \"<\", \"version_name\": \"Selected O(8.X), P(9.0), Q(10.0), R(11.0) \", \"version_value\": \"SMR Mar-2021 Release 1\"}]}}]}, \"vendor_name\": \"Samsung Mobile\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.\"}]}, \"generator\": {\"engine\": \"Vulnogram 0.0.9\"}, \"impact\": {\"cvss\": {\"attackComplexity\": \"HIGH\", \"attackVector\": \"PHYSICAL\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 6.1, \"baseSeverity\": \"MEDIUM\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"HIGH\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"CVE-703: Improper Check or Handling of Exceptional Conditions\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"https://security.samsungmobile.com/securityUpdate.smsb\", \"refsource\": \"CONFIRM\", \"url\": \"https://security.samsungmobile.com/securityUpdate.smsb\"}, {\"name\": \"https://security.samsungmobile.com\", \"refsource\": \"MISC\", \"url\": \"https://security.samsungmobile.com\"}]}, \"source\": {\"discovery\": \"UNKNOWN\"}}}}, \"cveMetadata\": {\"assignerOrgId\": \"3af57064-a867-422c-b2ad-40307b65c458\", \"assignerShortName\": \"Samsung Mobile\", \"cveId\": \"CVE-2021-25370\", \"datePublished\": \"2021-03-26T18:23:25.000Z\", \"dateReserved\": \"2021-01-19T00:00:00.000Z\", \"dateUpdated\": \"2026-01-14T14:24:49.025Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2021-25370","id":7055,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.0089, \"percentile\": 0.59473}"},{"alert":0,"cve":"CVE-2021-25370","id":4832,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.0089, \"percentile\": 0.5941}"},{"alert":0,"cve":"CVE-2021-25370","id":2614,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.0089, \"percentile\": 0.59363}"},{"alert":1,"cve":"CVE-2021-25370","id":919,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2021-25370\", \"cwes\": [\"CWE-416\"], \"dateAdded\": \"2022-11-08\", \"dueDate\": \"2022-11-29\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25370\", \"product\": \"Mobile Devices\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.\", \"vendorProject\": \"Samsung\", \"vulnerabilityName\": \"Samsung Mobile Devices Memory Corruption Vulnerability\"}"}],"record":{"affected":[{"product":"Samsung Mobile Devices","vendor":"Samsung Mobile","versions":[{"lessThan":"SMR Mar-2021 Release 1","status":"affected","version":"Selected O(8.X), P(9.0), Q(10.0), R(11.0) ","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-03T20:03:05.565Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://security.samsungmobile.com/securityUpdate.smsb"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://security.samsungmobile.com"}],"title":"CVE Program Container"},{"metrics":[{"other":{"content":{"id":"CVE-2021-25370","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-04T21:25:47.186998Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2022-11-08","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25370"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-703","description":"CWE-703 Improper Check or Handling of Exceptional Conditions","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-01-14T14:24:49.025Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25370"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Samsung Mobile Devices","vendor":"Samsung Mobile","versions":[{"lessThan":"SMR Mar-2021 Release 1","status":"affected","version":"Selected O(8.X), P(9.0), Q(10.0), R(11.0) ","versionType":"custom"}]}],"descriptions":[{"lang":"en","value":"An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic."}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"description":"CVE-703: Improper Check or Handling of Exceptional Conditions","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2021-03-26T18:23:25.000Z","orgId":"3af57064-a867-422c-b2ad-40307b65c458","shortName":"Samsung Mobile"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://security.samsungmobile.com/securityUpdate.smsb"},{"tags":["x_refsource_MISC"],"url":"https://security.samsungmobile.com"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"mobile.security@samsung.com","ID":"CVE-2021-25370","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Samsung Mobile Devices","version":{"version_data":[{"version_affected":"<","version_name":"Selected O(8.X), P(9.0), Q(10.0), R(11.0) ","version_value":"SMR Mar-2021 Release 1"}]}}]},"vendor_name":"Samsung Mobile"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"HIGH","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CVE-703: Improper Check or Handling of Exceptional Conditions"}]}]},"references":{"reference_data":[{"name":"https://security.samsungmobile.com/securityUpdate.smsb","refsource":"CONFIRM","url":"https://security.samsungmobile.com/securityUpdate.smsb"},{"name":"https://security.samsungmobile.com","refsource":"MISC","url":"https://security.samsungmobile.com"}]},"source":{"discovery":"UNKNOWN"}}}},"cveMetadata":{"assignerOrgId":"3af57064-a867-422c-b2ad-40307b65c458","assignerShortName":"Samsung Mobile","cveId":"CVE-2021-25370","datePublished":"2021-03-26T18:23:25.000Z","dateReserved":"2021-01-19T00:00:00.000Z","dateUpdated":"2026-01-14T14:24:49.025Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794370801,"cve":"CVE-2021-25370","description":"An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.","epss":{"date":"2026-11-12","epss":0.0089,"percentile":0.59835},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2021-25370","cwes":["CWE-416"],"dateAdded":"2022-11-08","dueDate":"2022-11-29","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25370","product":"Mobile Devices","requiredAction":"Apply updates per vendor instructions.","shortDescription":"Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.","vendorProject":"Samsung","vulnerabilityName":"Samsung Mobile Devices Memory Corruption Vulnerability"},"kev_checked":1794522003,"products":"Samsung Mobile Samsung Mobile Devices","references":["https://security.samsungmobile.com/securityUpdate.smsb","https://security.samsungmobile.com","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25370"],"score":{"attackComplexity":"HIGH","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","provider":"Samsung Mobile","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Samsung Mobile Devices Memory Corruption Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}