MEDIUMCVSS v3.1 4.4Actively exploited · CISA KEV since 2022-11-08Vulnerability
CVE-2021-25370
Samsung mobile devices using Mali GPU contain an incorrect implementation handling file descriptor in dpu driver. This incorrect implementation results in memory corruption, leading to kernel panic. This vulnerability was chained with CVE-2021-25337 and CVE-2021-25369.
Properties
- Euvd product
- Samsung Mobile Devices
- Vulnerability name
- Samsung Mobile Devices Memory Corruption Vulnerability
- First seen
- 2026-01-14T14:24:49+00:00
- Cvss score
- 4.4
- Epss score
- 0.0089
- Last seen
- 2026-10-19T12:00:27+00:00
- Due date
- 2022-11-29
- Euvd assigner
- Samsung Mobile
- Retrieved at
- 2026-10-21T01:24:47+00:00
- Exploited euvd since
- 2022-11-08T00:00:00+00:00
- Src batch id
- epss_history-20261020T103617Z-728ddd
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Date added
- 2022-11-08
- Score
- 4.4
- Euvd base score version
- 3.1
- Fetched at
- 2026-10-20T10:36:20+00:00
- Euvd vendor
- Samsung Mobile
- Cvss vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 6.1
Related Entities (54 · showing 24)
AFFECTS_PRODUCT (50 · showing 20)
HAS_WEAKNESS (2)
DESCRIBES (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph