CVE-2021-25441

2021-07-0813:48:09

CWE-20

Samsung Mobile

www.cve.org

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Improper input validation vulnerability in AR Emoji Editor prior to version 4.4.03.5 in Android Q(10.0) and above allows untrusted applications to access arbitrary files with an escalated privilege.

CNA Affected

[
  {
    "product": "AR Emoji Editor",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "4.4.03.5 in Android Q(10.0) and above",
        "status": "affected",
        "version": "-",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2021&month=7