CVE-2021-25520

Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet.

Score

CVSS 3.1 6.1 Medium

Status

Modified - mobile.security@samsung.com

Published

2021-12-08

Last modified

2024-08-03

Weaknesses

CWE-20, CWE-79

Affected products

• Internet (Samsung)
• Samsung Internet (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=12