Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2021-25435: Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using recovery partition in wireless firmware download mode.

CVE-2021-25435 · published 5 years ago

Summary

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using recovery partition in wireless firmware download mode.

What to do

Update linux tizen to version 5.5 or later.

Affected software

Vendor	Product	Affected versions
linux	tizen	< 5.5 `cpe:2.3:o:linux:tizen::::::::`

Original advisory text

Improper input validation vulnerability in Tizen bootloader prior to Firmware update JUL-2021 Release allows arbitrary code execution using recovery partition in wireless firmware download mode.

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7 Vendor Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Exploitation

2% chance of attack within 30 days

Type

CWE-20Improper Input Validation

Timeline

Published8 Jul 2021

Updated3 Nov 2026

First seen29 Sep 2026

Sources

CVE-2021-25435 · NVD

Track software like this

Free during beta