CVE-2021-25349

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking the PendingIntent...

Information disclosure

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent...

Design/Logic Flaw

Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent...

CVE-2021-25355

CVE-2021-25355 affects Samsung Notes prior to version 4.2.00.22. The root cause is unsafe use of PendingIntent, enabling local attackers to perform unauthorized actions by hijacking the PendingIntent without permission. Impact is local, with potential for partial confidentiality/integrity/availab...

CVE-2021-25353

CVE-2021-25353 affects Samsung Galaxy Themes prior to version 5.2.00.1215. The vulnerability arises from using an empty PendingIntent, which lets a local attacker hijack the PendingIntent to read and write private files/directories of the Galaxy Themes application without permission. Impact is li...

CVE-2021-25352

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent...

CVE-2021-25352

Affected product/component: Samsung Bixby Voice. Vulnerability: Privilege escalation via hijacking/modifying a PendingIntent with implicit intents. Root cause: Implicit PendingIntent handling allows an attacker to execute privileged actions when interacting with Bixby Voice. Affected versions: pr...

CVE-2021-25349

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking the PendingIntent...

CVE-2021-25349

The CVE-2021-25349 entry concerns the Slow Motion Editor. Affected: Slow Motion Editor versions prior to 3.5.18.5. Root cause: use of an unsafe PendingIntent that allows a local attacker to hijack PendingIntent and perform unauthorized actions without user permission. Impact details in sources in...

CVE-2021-25353: Improper Authorization

Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent...

CVE-2021-25352: Improper Authorization

Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent...

PT-2021-16542 · Unknown · Slow Motion Editor

Name of the Vulnerable Software and Affected Versions: Slow Motion Editor versions prior to 3.5.18.5 Description: The issue allows local attackers to perform unauthorized actions without permission by hijacking the PendingIntent in the Slow Motion Editor. This is due to the use of an unsafe...

CVE-2021-25355: Improper Authorization

Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the PendingIntent...

Samsung Notes 安全漏洞

Samsung Notes is an application from Samsung, a South Korean company. It is used to provide a recording function. A security vulnerability exists in Samsung Notes prior to version 4.2.00.22, which can be exploited by a local attacker to conduct illegal operations by hijacking a PendingIntent...

CVE-2021-25349: Improper Access Control

Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking the PendingIntent...

CVE-2021-0381

In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0372

CVE-2021-0372 is a local elevation of privilege in Android 11 via getMediaOutputSliceAction in RemoteMediaSlice.java, caused by an unsafe PendingIntent that bypasses permissions without requiring user interaction. The impact is escalation to higher privileges (HIGH per CVSSv3.1) with local access...

CVE-2021-0372

In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0372: Incorrect Permission Assignment for Critical Resource

In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2021-0381: Incorrect Default Permissions

In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...