← CVE Intelligence

CVE-2021-25381

Samsung Mobile / Samsung Account PUBLISHED

Description (CNA)

Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

Affected (CNA)

Vendor / productVersions
Samsung Mobile / Samsung Accountaffected Android P(9.0) and below before 10.8.0.4; affected Android Q(10.0) and above before 12.1.1.3

CWE

CWE-285

References

ADP enrichment

CVE

No English description supplied.