CVE-2021-25405

An improper access control vulnerability in ScreenOffActivity in Samsung Notes prior to version 4.2.04.27 allows untrusted applications to access local files.

Score

CVSS 3.1 5.5 Medium

Status

Modified - mobile.security@samsung.com

Published

2021-06-11

Last modified

2024-08-03

Weaknesses

CWE-284

Affected products

• Notes (Samsung)
• Samsung Notes (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=5