Files
CVEs-PoC/2021/CVE-2021-25470.md
T
2024-06-18 02:51:15 +02:00

18 lines
831 B
Markdown

### [CVE-2021-25470](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-25470)
![](https://img.shields.io/static/v1?label=Product&message=Samsung%20Mobile%20Devices&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=Select%20P(9.0)%2C%20Q(10.0)%2C%20R(11.0)%20devices%20with%20Exynos%20and%20Mediatek%20chipsets%3C%20SMR%20Oct-2021%20Release%201%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-94%3A%20Improper%20Control%20of%20Generation%20of%20Code&color=brighgreen)
### Description
An improper caller check logic of SMC call in TEEGRIS secure OS prior to SMR Oct-2021 Release 1 can be used to compromise TEE.
### POC
#### Reference
- https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
#### Github
No PoCs found on GitHub currently.