CVE-2021-25524

Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID.

Score

CVSS 3.1 4.0 Medium

Status

Modified - mobile.security@samsung.com

Published

2021-12-08

Last modified

2024-08-03

Weaknesses

CWE-922

Affected products

• Contacts (Samsung)
• Contacts (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=12