Description (CNA)
Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Samsung Mobile / Samsung Members | affected Android O(8.1) and below before 2.4.81.13; affected Android P(9.0) and above before 3.8.00.13 |
CWE
CWE-287
References
ADP enrichment
No English description supplied.