CVE-2021-25371

CISA description

Samsung mobile devices contain an unspecified vulnerability within DSP driver that allows attackers to load ELF libraries inside DSP.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable

Notes & references

• https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=3
• https://nvd.nist.gov/vuln/detail/CVE-2021-25371

Where this lands in 800-53

Vulnerability data triggers these controls during assessment and continuous monitoring.

• RA-5 · Vulnerability Monitoring and Scanning
• SI-2 · Flaw Remediation
• CM-6 · Configuration Settings
• SI-7 · Software, Firmware, and Information Integrity
• CM-8 · System Component Inventory

External lookups

• NVD · CVE-2021-25371
• CVE.org · CVE-2021-25371
• CISA KEV catalog (canonical)