CVEs-PoC/2021/CVE-2021-25436.md

CVE-2021-25436

Description

Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code execution via Samsung Accessory Protocol.

POC

Reference

• https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7

Github

• https://github.com/imssm99/imssm99
• https://github.com/jungyoon-lee/jungyoon-lee