CVE-2021-25403

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9 in Android Q(10.0) and above allows attacker to access contacts and file provider using SettingWebView component.

Score

CVSS 3.1 3.3 Low

Status

Modified - mobile.security@samsung.com

Published

2021-06-11

Last modified

2024-08-03

Weaknesses

CWE-200

Affected products

• Account (Samsung)
• Samsung Account (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=5