Lucene search

K
cvelistSamsung MobileCVELIST:CVE-2021-25435
HistoryJul 08, 2021 - 1:46 p.m.

CVE-2021-25435

2021-07-0813:46:59
CWE-20
Samsung Mobile
www.cve.org
8
tizen bootloader
input validation
arbitrary code execution
firmware update

AI Score

9.8

Confidence

High

EPSS

0.004

Percentile

73.9%

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using recovery partition in wireless firmware download mode.

CNA Affected

[
  {
    "product": "Tizen wearable devices",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "Firmware update JUL-2021 Release",
        "status": "affected",
        "version": "Tizen 5.5",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

9.8

Confidence

High

EPSS

0.004

Percentile

73.9%

Related for CVELIST:CVE-2021-25435