CVE-2021-25436

Description

Improper input validation vulnerability in Tizen FOTA service prior to Firmware update JUL-2021 Release allows arbitrary code execution via Samsung Accessory Protocol.

Affected products

• Samsung Mobile / Tizen wearable devicesTizen 5.5 – Firmware update JUL-2021 Release

References

• MISChttps://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7