{"id":"CVE-2021-25407","published":"2021-06-11T14:33:44Z","modified":"2024-08-03T20:03:05Z","title":"A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write","vendor":"Samsung","product":"Samsung Mobile Devices","tier":"tail","description":{"text":"A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00171,"percentile":0.0648,"provenance":"source"},"cwes":[{"id":"CWE-787","name":"Out-of-bounds Write"}],"references":[{"url":"https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=6","tags":["x_refsource_MISC"]},{"url":"http://packetstormsecurity.com/files/163198/Samsung-NPU-npu_session_format-Out-Of-Bounds-Write.html","tags":["x_refsource_MISC"]}],"priority":{"score":6.3,"factors":[{"name":"EPSS percentile","points":1.3},{"name":"Public exploit code","points":5.0}]},"vendorSlug":"samsung","affectedVersions":[{"vendor":"Samsung Mobile","product":"Samsung Mobile Devices","versions":[">= P(9.0), Q(10.0), R(11.0) devices with Exynos9820, 9830, 980, 2100 chipsets, < SMR JUN-2021 Release 1"]}],"euvd":{"id":"EUVD-2021-12303","exploited":false,"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/163198/Samsung-NPU-npu_session_format-Out-Of-Bounds-Write.html"],"lineage":{"familyId":"fam-class-samsung-mobile-devices-cwe-787"}}