Samsung August 2021 Security Patch Details – New Fixes [CVEs/SVEs]

Samsung has recently released its updated security bulletin, which details the exact changes that come with the August 2021 security patch for Galaxy devices. The company’s latest security update brings fixes for dozens of vulnerabilities and exploits for enhanced system stability.

According to the South Korean tech giant, the August 2021 security patch update includes fixes for 38 CVEs in which 3 are critical, 23 are high, 9 are moderate, 1 already included in previous updates, and 3 do not apply to Samsung devices.

Stay connected with us on Telegram

In addition to the above-mentioned fixes for Android OS from Google, Samsung also added fixes for 8 SVEs specifically for Galaxy devices. You can see the latest August 2021 security patch CVEs fixes below, followed by SVEs fixes.

August 2021 Security Patch

Critical

CVE-2021-0592, CVE-2021-1965

High

CVE-2021-1931, CVE-2021-1940, CVE-2021-1953, CVE-2021-1943, CVE-2021-1964, CVE-2021-1907, CVE-2021-1955, CVE-2021-1945, CVE-2021-1970, CVE-2021-1954, CVE-2020-0368, CVE-2021-0514, CVE-2021-0515, CVE-2021-0603, CVE-2021-0640, CVE-2021-0645, CVE-2021-0646, CVE-2021-0519, CVE-2021-0591, CVE-2021-0593, CVE-2021-0584, CVE-2021-0641, CVE-2021-0642

Moderate

CVE-2021-0555, CVE-2020-1971, CVE-2021-0567, CVE-2021-0570, CVE-2021-0572, CVE-2021-0557, CVE-2021-0558, CVE-2021-0559, CVE-2021-0561

Already included in previous updates

CVE-2021-1938

Not applicable to Samsung devices

CVE-2020-11307, CVE-2021-0577, CVE-2021-0550

As said already, Samsung offers 8 SVE items described below in order to increase Galaxy device owners’ confidence on security of Samsung mobile phones. Samsung security index (SSI), found in “Security software version”, SMR August-2021 Release 1 includes all patches from Samsung and Google

SVE-2021-20831 (CVE-2021-25443): UAF in conn_gadget driver

Severity: Low
Affected versions: O(8.1), P(9.0), Q(10.0), R(11.0)
Reported on: February 26, 2021
Disclosure status: Privately disclosed.
A use after free vulnerability in conn_gadget driver prior to SMR AUG-2021 Release 1 allows malicious action by an attacker.
The patch adds proper check logic to prevent use after free.

SVE-2021-21948 (CVE-2021-25444): IV reuse in Keymaster TA

Severity: High
Affected versions: O(8.1), P(9.0), Q(10.0)
Reported on: May 25, 2021
Disclosure status: Privately disclosed.
An IV reuse vulnerability in keymaster prior to SMR AUG-2021 Release 1 allows decryption of custom keyblob with privileged process.
The patch prevents reusing IV by blocking addition of custom IV.