Out-of-Bounds Write Vulnerability in Samsung Mobile Services Library
CVE-2025-21034

4MEDIUM

Key Information:

Vendor

Samsung

Vendor
CVE Published:
3 September 2025

What is CVE-2025-21034?

An out-of-bounds write vulnerability exists in the libsavsvc.so component of Samsung Mobile Services prior to the SMR September 2025 Release 1. This flaw can be exploited by local attackers to potentially execute arbitrary code, posing significant risks to device security if not addressed promptly. Users and administrators should ensure that their systems are updated to the latest security standards to mitigate this threat.

Affected Version(s)

Samsung Mobile Devices SMR Sep-2025 Release in Android 13, 14, 15, 16

References

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-21034 : Out-of-Bounds Write Vulnerability in Samsung Mobile Services Library