VULNERABILITY INTELLIGENCE

CVE-2021-25343

CVSS score4 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2021-03-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Description

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.

Weakness classification

  • mobile.security@samsung.com: CWE-287
  • nvd@nist.gov: CWE-287

Primary references