CVE-2021-25341

Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider.

Score

CVSS 3.1 4.0 Medium

Status

Modified - mobile.security@samsung.com

Published

2021-03-04

Last modified

2024-08-03

Weaknesses

CWE-287

Affected products

• S Assistant (Samsung)
• S Assistant (Samsung Mobile)

References

• https://security.samsungmobile.com
• https://security.samsungmobile.com/serviceWeb.smsb