CVE-2021-25381mediumCWE-285

CVE-2021-25381: medium-severity vulnerability in Samsung Account

Published · Updated

Follow this CVE+ Monitor Samsung Account

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.2%
Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
Samsung Mobile · Samsung Account
Related CVEs — Samsung Account

In the same product, most dangerous first.

CVE-2022-30732MEDIUMCVE-2022-30732EPSS 0.6%CVE-2022-30737MEDIUMCVE-2022-30737EPSS 0.6%CVE-2022-30734MEDIUMCVE-2022-30734EPSS 0.6%CVE-2022-30733MEDIUMCVE-2022-30733EPSS 0.6%CVE-2022-30735MEDIUMCVE-2022-30735EPSS 0.5%CVE-2023-42551MEDIUMCVE-2023-42551EPSS 0.4%