← CVE Intelligence

CVE-2021-25373

Samsung Mobile / Customization Service PUBLISHED

Description (CNA)

Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android P(9.0), 2.7.02.1 in Android Q(10.0) and 2.9.01.1 in Android R(11.0) allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

Affected (CNA)

Vendor / productVersions
Samsung Mobile / Customization Serviceaffected Android O(8.x) before 2.2.02.1; affected Android P(9.0) before 2.4.03.0; affected Android Q(10.0) before 2.7.02.1; affected Android R(11.0) before 2.9.01.1

CWE

CWE-285

References

ADP enrichment

CVE

No English description supplied.