CVE-2021-25343

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.

Score

CVSS 3.1 4.0 Medium

Status

Modified - mobile.security@samsung.com

Published

2021-03-04

Last modified

2024-08-03

Weaknesses

CWE-287

Affected products

• Members (Samsung)
• Samsung Members (Samsung Mobile)

References

• https://security.samsungmobile.com/
• https://security.samsungmobile.com/serviceWeb.smsb