CVE-2021-25438CWE-284

CVE-2021-25438: vulnerability in Samsung Members

Published · Updated

Follow this CVE+ Monitor Samsung Members

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.7%
Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause local file inclusion in webview.
Affected products
Samsung Mobile · Samsung Members
Related CVEs — Samsung Members

In the same product, most dangerous first.

CVE-2021-25374HIGHCVE-2021-25374EPSS 3.1%CVE-2025-21079HIGHCVE-2025-21079EPSS 0.6%CVE-2025-20949MEDIUMCVE-2025-20949EPSS 0.3%CVE-2023-30703LOWCVE-2023-30703EPSS 0.3%CVE-2026-20985HIGHCVE-2026-20985EPSS 0.3%CVE-2022-28777MEDIUMCVE-2022-28777EPSS 0.2%