Vulnerability Description
Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attacker to execute privileged action.
CVSS Score
3.3
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samsung | Experience Service | <= 10.8.0.4 |
| Android | 9.0 |
Related Weaknesses (CWE)
References
- https://security.samsungmobile.com/Vendor Advisory
- https://security.samsungmobile.com/serviceWeb.smsbVendor Advisory
- https://security.samsungmobile.com/Vendor Advisory
- https://security.samsungmobile.com/serviceWeb.smsbVendor Advisory
FAQ
What is CVE-2021-25377?
CVE-2021-25377 is a vulnerability with a CVSS score of 3.3 (LOW). Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attacker to execute privileged action.
How severe is CVE-2021-25377?
CVE-2021-25377 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-25377?
Check the references section above for vendor advisories and patch information. Affected products include: Samsung Experience Service, Google Android.