CVE-2021-25394
11.06.2021, 15:15
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.
| Vendor | Product | Version |
|---|---|---|
| samsung | android | 8.1 |
| samsung | android | 9.0:smr-apr-2021-r1 |
| samsung | android | 9.0:smr-feb-2021-r1 |
| samsung | android | 9.0:smr-jan-2021-r1 |
| samsung | android | 9.0:smr-mar-2021-r1 |
| samsung | android | 10.0:smr-apr-2021-r1 |
| samsung | android | 10.0:smr-feb-2021-r1 |
| samsung | android | 10.0:smr-jan-2021-r1 |
| samsung | android | 11.0:smr-apr-2021-r1 |
| samsung | android | 11.0:smr-feb-2021-r1 |
| samsung | android | 11.0:smr-jan-2021-r1 |
| samsung | android | 11.0:smr-jul-2021-r1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-416 - Use After FreeReferencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.
- CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.