VULNERABILITY INTELLIGENCE

CVE-2021-25403

CVSS score3.3 LOW
EPSS probability0.23%
CISA KEVNot currently listed
Published2021-06-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Intent redirection vulnerability in Samsung Account prior to version 10.8.0.4 in Android P(9.0) and below, and 12.2.0.9 in Android Q(10.0) and above allows attacker to access contacts and file provider using SettingWebView component.

Weakness classification

  • mobile.security@samsung.com: CWE-200
  • nvd@nist.gov: NVD-CWE-Other

Primary references