CVE-2021-25521

Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet.

Score

CVSS 3.1 4.0 Medium

Status

Modified - mobile.security@samsung.com

Published

2021-12-08

Last modified

2024-08-03

Weaknesses

CWE-285, CWE-552

Affected products

• Internet (Samsung)
• Samsung Internet (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=12